1
[root@Server ~]# dnf -y install samba samba-common samba-tools
2
# 安装 Samba 服务
3
[root@Server ~]# mkdir /smb-share
4
# 创建共享目录
5
[root@Server ~]# echo "shared by SMB" >> /smb-share/README
6
# 创建测试文件
7

8
[root@Server ~]# id jiu
9
uid=1010(jiu) gid=1010(jiu) groups=1010(jiu)
10
[root@Server ~]# echo "oldboy123.com" | passwd --stdin jiu
11
[root@Server ~]# smbpasswd -a jiu
12
New SMB password:'passwd'
13
Retype new SMB password:'passwd'
14
Added user jiu.
15
# 将用户添加到 Samba 数据库 (设置 Samba 密码)
16

17
[root@Server ~]# vim /etc/samba/smb.conf
18
[samba-share]
19
   comment = share file via SMB
20
   path = /smb-share
21
   valid users = jiu
22
   browseable = yes
23
   read only = yes
24
   create mask = 0644
25

26
[root@Server ~]# testparm
27
Load smb config files from /etc/samba/smb.conf
28
Loaded services file OK.
29
# 检查配置语法
30
Press enter to see a dump of your service definitions
31
passwd
32

33
[root@Server ~]# systemctl enable --now smb
34
Created symlink '/etc/systemd/system/multi-user.target.wants/smb.service' → '/usr/lib/systemd/system/smb.service'.
35
# 启动并开机自启 smb 服务

1
[root@Server ~]# chown jiu /smb-share/
2
# 将目录所有者改为 jiu,允许写入
3

4
[root@Server ~]# vim /etc/samba/smb.conf
5
[samba-share]
6
   comment = share file via SMB
7
   path = /smb-share
8
   valid users = jiu
9
   writeable = yes
10
   # 修改为可写
11
   write list = jiu
12
   # 添加写入列表
13
   create mask = 0644
14

15
[root@Server ~]# systemctl restart smb
16
# 重启服务
17
============================
18
'回到客户端,重新挂载并测试写入'
19
[root@Client ~]# umount /mnt/smb-share
20
# 先卸载旧挂载
21
[root@Client ~]# mount.cifs -o username=jiu,password=passwd //10.0.0.101/samba-share /mnt/smb-share
22
# 重新挂载
23
[root@Client ~]# touch /mnt/smb-share/test_file
24
[root@Client ~]# echo "test write" >> /mnt/smb-share/test_file
25
# 测试写入
26
[root@Client ~]# ls -l /mnt/smb-share/
27
total 8
28
-rwxr-xr-x 1 root root 14 Apr 16 19:12 README
29
-rwxr-xr-x 1 root root 11 Apr 16 19:25 test_file
30
[root@Client ~]# cat /mnt/smb-share/test_file
31
test write
32
# 查看结果

1
1)创建多用户账户
2
[root@Server ~]# systemctl restart smb
3
[root@Server ~]# useradd david
4
'读写'
5
[root@Server ~]# useradd elle
6
"只读"
7
[root@Server ~]# useradd frank
8
"读写"
9

10
2)给密码
11
[root@Server ~]# echo "oldboy123.com" | passwd --stdin david
12
[root@Server ~]# echo "oldboy123.com" | passwd --stdin elle
13
[root@Server ~]# echo "oldboy123.com" | passwd --stdin frank
14

15
3)添加都到Samba数据库
16
[root@Server ~]# smbpasswd -a david
17
New SMB password:
18
Retype new SMB password:
19
Added user david.
20
[root@Server ~]# smbpasswd -a elle
21
New SMB password:
22
Retype new SMB password:
23
Added user elle.
24
[root@Server ~]# smbpasswd -a frank
25
New SMB password:
26
Retype new SMB password:
27
Added user frank.
28

29
4)验证用户是否添加成功
30
[root@Server ~]# pdbedit -L
31
jiu:1010:
32
elle:1013:
33
david:1012:
34
frank:1014:
35

36
5)创建共享目录
37
[root@Server ~]# mkdir -p /remote/multi
38

39
6)设置目录权限
40
[root@Server ~]# chmod 755 /remote/multi
41
[root@Server ~]# setfacl -m u:frank:rwx /remote/multi/
42
[root@Server ~]# setfacl -m u:david:rwx /remote/multi/
43
# 设置ACL权限,david和frank有读写权限,elle只有读权限
44

45
7)配置Samba配置文件
46
[root@Server ~]# vim /etc/samba/smb.conf
47
'接着昨天的来'
48
[samba-share]
49
   comment = share file via SMB
50
   path = /smb-share
51
   valid users = jiu
52
   browseable = yes
53
   read only = no
54
   create mask = 0644
55

56
[multi-share]
57
        comment = client with different credentials
58
        path = /remote/multi
59
        valid users = elle, david, frank
60
        writeable = yes
61
        write list = david, frank
62
        hosts allow = 10.0.0.0/24
63

64
8)检查与启动
65
[root@Server ~]# testparm
66
[root@Server ~]# systemctl restart smb
67
# 重启服务
68

69
9)文件测试
70
[root@Server ~]# su david -c "touch /remote/multi/test "
71
[root@Server ~]# ll /remote/multi/
72
total 0
73
-rw-r--r-- 1 david david 0 Apr 19 10:12 test

1
1)多用户挂载
2
[root@Client ~]# df -h
3
Filesystem           Size  Used Avail Use% Mounted on
4
/dev/mapper/rl-root   47G  3.9G   43G   9% /
5
devtmpfs             939M     0  939M   0% /dev
6
tmpfs                965M     0  965M   0% /dev/shm
7
efivarfs             256K   56K  196K  22% /sys/firmware/efi/efivars
8
tmpfs                386M  7.1M  379M   2% /run
9
tmpfs                1.0M     0  1.0M   0% /run/credentials/systemd-journald.service
10
/dev/nvme0n1p2       960M  296M  665M  31% /boot
11
/dev/nvme0n1p1       599M  8.4M  591M   2% /boot/efi
12
tmpfs                1.0M     0  1.0M   0% /run/credentials/getty@tty1.service
13
tmpfs                193M  4.0K  193M   1% /run/user/0
14
[root@Client ~]# mkdir /mnt/multi
15
[root@Client ~]# smbclient -L //10.0.0.101 -U elle%passwd
16
'手动测试!'
17
.......
18
  elle            Disk      Home Directories
19
SMB1 disabled -- no workgroup available
20
[root@Client ~]# smbclient -L //10.0.0.101 -U david%passwd
21
.......
22
  david           Disk      Home Directories
23
SMB1 disabled -- no workgroup available
24
[root@Client ~]# smbclient -L //10.0.0.101 -U frank%passwd
25
.......
26
  frank           Disk      Home Directories
27
SMB1 disabled -- no workgroup available
28
[root@Client ~]# mount.cifs -o username=elle,password=passwd //10.0.0.101/multi-share /mnt/multi/
29
# 普通挂载
30
[root@Client ~]# df -h | grep multi
31
//10.0.0.101/multi-share   47G  4.4G   43G  10% /mnt/multi
32
"普通挂载成功,再尝试multiuser挂载："
33
[root@Client ~]# umount /mnt/multi
34
# 卸载普通挂载
35
[root@Client ~]# mount.cifs -v -o multiuser,sec=ntlmssp,username=elle,password=passwd //10.0.0.101/multi-share /mnt/multi/
36
Host "10.0.0.101" resolved to the following IP addresses: 10.0.0.101
37
mount.cifs kernel mount options: ip=10.0.0.101,unc=\\10.0.0.101\multi-share,multiuser,sec=ntlmssp,user=elle,pass=********
38
# 尝试multiuser挂载
39
[root@Client ~]# df -h | grep multi
40
//10.0.0.101/multi-share   47G  4.4G   43G  10% /mnt/multi
41

42
2)测试验证
43
[root@Client ~]# ls  -lh /mnt/multi/
44
total 0
45
-rwxr-xr-x 1 root root 0 Apr 19 10:12 test
46
[root@Client ~]# touch /mnt/multi/heima
47
touch: cannot touch '/mnt/multi/heima': Permission denied
48
# 我们默认登录的就是elle,他只有读权限!
49

50
3)创建一个用户
51
[root@Client ~]# useradd jiu
52
[root@Client ~]# passwd jiu
53
New password:
54
Retype new password:
55
passwd: password updated successfully
56

57
4)远程登录
58
[root@Client ~]# ssh jiu@localhost
59
  测试多用户环境下的权限
60
  以不同用户身份执行操作
61
  模拟多用户同时访问共享资源的场景
62

63
5)添加用户凭证
64
[jiu@Client ~]$ cifscreds add --username david 10.0.0.101
65
Password:
66
[jiu@Client ~]$ cifscreds update --username david 10.0.0.101
67
Password:
68
[jiu@Client ~]$ keyctl show
69
Session Keyring
70
 568012152 --alswrv   1000  1000  keyring: _ses
71
 634119942 --alswrv   1000 65534   \_ keyring: _uid.1000
72
 825485613 ----sw-v   1000  1000   \_ logon: cifs:a:10.0.0.101
73
[jiu@Client ~]$ ls /mnt/multi/
74
test
75
[jiu@Client ~]$ cd /mnt/multi
76
[jiu@Client multi]$ touch cc
77
[jiu@Client multi]$ ll
78
total 0
79
-rwxr-xr-x 1 jiu jiu 0 Apr 19 10:38 cc
80
-rwxr-xr-x 1 jiu jiu 0 Apr 19 10:12 test
81
[jiu@Client multi]$ echo test > cc
82
[jiu@Client multi]$ cat cc
83
test
84
[jiu@Client multi]$ exit
85
logout
86
Connection to localhost closed.
87

88
6)卸载重新挂载
89
[root@Client ~]# umount /mnt/multi
90
[root@Client ~]# !mount
91
mount.cifs -v -o multiuser,sec=ntlmssp,username=elle,password=passwd //10.0.0.101/multi-share /mnt/multi/
92
Host "10.0.0.101" resolved to the following IP addresses: 10.0.0.101
93
mount.cifs kernel mount options: ip=10.0.0.101,unc=\\10.0.0.101\multi-share,multiuser,sec=ntlmssp,user=elle,pass=********
94

95
7)测试登录
96
[root@Client ~]# ls /mnt/multi/
97
cc  test
98
'👆都是david创建的文件'
99
[root@Client ~]# !ssh
100
ssh jiu@localhost.
101
jiu@localhost's password: '
102
[jiu@Client ~]$ echo 1 >> /mnt/multi/cc
103
-bash: /mnt/multi/cc: Permission denied
104
'没有给用户凭证,没有权限'
105
[jiu@Client ~]$ ll /mnt/multi/cc
106
ls: cannot access '/mnt/multi/cc': Permission denied
107
# 仍然没有权限
108
[jiu@Client ~]$ keyctl clear @s
109
[jiu@Client ~]$ keyctl clear @u
110
# 清理所有过期密钥
111
[jiu@Client ~]$ cifscreds add --username frank 10.0.0.101
112
Password:
113
'另一个用户 frank'
114
[jiu@Client ~]$ keyctl  show
115
Session Keyring
116
 941728413 --alswrv   1000  1000  keyring: _ses
117
 634119942 --alswrv   1000 65534   \_ keyring: _uid.1000
118
 563941266 ----sw-v   1000  1000   \_ logon: cifs:a:10.0.0.101
119
[jiu@Client ~]$ echo 1 >> /mnt/multi/cc
120
-bash: /mnt/multi/cc: Permission denied
121
[jiu@Client ~]$ echo 1 >> /mnt/multi/test
122
-bash: /mnt/multi/test: Permission denied
123
'这两个文件都是david创建的'
124
# 而我现在的用户凭证是frank,自然是没有办法写入的!
125
# 即使这两个用户都用读写权限!
126
[jiu@Client ~]$ touch /mnt/multi/dd-frank
127
# 创建过独属于frank的文件
128
[jiu@Client ~]$ ls -lh /mnt/multi/
129
total 4.0K
130
-rwxr-xr-x 1 jiu jiu 5 Apr 19 10:40 cc
131
-rwxr-xr-x 1 jiu jiu 0 Apr 19 10:57 dd-frank
132
-rwxr-xr-x 1 jiu jiu 0 Apr 19 10:12 test
133
[jiu@Client ~]$ echo frank > /mnt/multi/dd-frank
134
# 并写入测试内容

1
[root@Client ~]# yum install -y autofs
2
# 安装服务
3
[root@Client ~]# ls -ld /etc/auto.master.d/
4
drwxr-xr-x 2 root root 6 May 12  2025 /etc/auto.master.d/
5
cat > /etc/auto.master << EOF
6
/misc   /etc/auto.misc
7
/share  /etc/auto.samba --timeout=60
8
+auto.master
9
EOF
10
# 重新创建配置文件
11
cat > /etc/auto.samba << EOF
12
smb1    -fstype=cifs,username=jiu,password=passwd  ://10.0.0.101/samba-share
13
multi   -fstype=cifs,multiuser,sec=ntlmssp,credentials=/etc/samba.pass ://10.0.0.101/multi-share
14
EOF
15
[root@Client ~]# vim /etc/samba.pass
16
# 创建凭证文件
17
username=elle
18
password=passwd
19
[root@Client ~]# chmod 400 /etc/samba.pass
20
# 设置正确的权限
21
[root@Client ~]# umount /mnt/multi
22
[root@Client ~]# df -h | grep /mnt
23
# 卸载挂载点!
24
[root@Client ~]# systemctl restart autofs
25
# 重启 autofs 服务
26

27
# 测试挂载
28
[root@Client ~]# ls /share
29
multi  smb1
30
[root@Client ~]# ls /share/smb1
31
README  test_file
32
[root@Client ~]# ls /share/multi
33
cc  dd-frank  test
34
[root@Client ~]# df -h | grep share
35
//10.0.0.101/multi-share   47G  4.4G   43G  10% /share/multi
36
//10.0.0.101/samba-share   47G  4.4G   43G  10% /share/smb1
37
'都挂载上去了!'
38

39
[root@Client ~]# ssh jiu@localhost
40
jiu@localhost's password: '
41
[jiu@Client ~]$ ll /share/multi/
42
ls: cannot access '/share/multi/': Permission denied
43
[jiu@Client ~]$ keyctl clear @s
44
[jiu@Client ~]$ keyctl clear @u
45
[jiu@Client ~]$ keyctl  show
46
Session Keyring
47
 476072777 --alswrv   1000  1000  keyring: _ses
48
[jiu@Client ~]$ cifscreds add --username david 10.0.0.101
49
Password:
50
[jiu@Client ~]$ keyctl  show
51
Session Keyring
52
 476072777 --alswrv   1000  1000  keyring: _ses
53
   6440152 ----sw-v   1000  1000   \_ logon: cifs:a:10.0.0.101
54
[jiu@Client ~]$ ll /share/multi/
55
total 8
56
-rw-r--r-- 1 root root 5 Apr 19 10:40 cc
57
-rw-r--r-- 1 root root 6 Apr 19 11:00 dd-frank
58
-rw-r--r-- 1 root root 0 Apr 19 10:12 test
59
[jiu@Client ~]$ touch /share/multi/dd
60
[jiu@Client ~]$ ll /share/multi/dd
61
-rw-r--r-- 1 root root 0 Apr 19 11:50 /share/multi/dd