Шпаргалки

<pre> yum -y install samba samba-client samba-common samba-winbind samba-winbind-clients pam_krb5 ntp acl </pre> <pre> systemctl enable ntpd systemctl restart ntpd systemctl enable smb systemctl enable nmb systemctl restart smb systemctl restart nmb firewall-cmd –permanent –zone=public –add-service=samba firewall-cmd –reload </pre>

nano /etc/hosts <pre> 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 10.1.0.20 fs1 fs1.augin.ru </pre>

<pre> authconfig \ –enablekrb5 \ –krb5kdc=dc.augin.ru \ –krb5adminserver=dc.augin.ru \ –krb5realm=DC.AUGIN.RU \ –enablewinbind \ –enablewinbindauth \ –smbsecurity=ads \ –smbrealm=AUGIN.RU \ –smbservers=dc.augin.ru \ –smbworkgroup=AUGIN \ –winbindtemplatehomedir=/home/%D/%U \ –winbindtemplateshell=/bin/bash \ –enablemkhomedir \ –enablewinbindusedefaultdomain \ –update </pre> <pre> net ads join -U Administrator </pre> <pre> systemctl start winbind systemctl enable winbind </pre> <pre> net ads info wbinfo -u </pre> smb.conf <pre> …

vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes

… [homes] comment = %U Home dir path = /home/%D/%U browseable = no writable = yes inherit acls = yes map acl inherit = yes root preexec = /etc/samba/makedir.sh %U

[disk1$] comment = disk1 path = /home/disk1 public = yes writable = yes veto files = /*.vir/*.vir2/ delete veto files = yes

</pre> nano /etc/samba/makedir.sh <pre> #!/bin/bash

if [ ! -d /home/disk1/users/$1 ]; then

      mkdir /home/disk1/users/$1
      chmod g+s /home/disk1/users/$1
      chown "$1" /home/disk1/users/$1
      chmod 770 /home/disk1/users/$1
      setfacl -m g:"domain admins":rwx /home/disk1/users/$1
      setfacl -d -m g:"domain admins":rwx /home/disk1/users/$1
      setfacl -m u:"$1":rwx /home/disk1/users/$1
      setfacl -d -m u:"$1":rwx /home/disk1/users/$1

fi exit 0

</pre>

<pre> setfacl -R -m g:«domain admins»:rwx /home/disk1/ setfacl -R -d -m g:«domain admins»:rwx /home/disk1/ </pre>

nano acl_users.sh <pre> #!/bin/bash

for D in *; do if [ -d «${D}» ]; then echo «${D}» # your processing here setfacl -R -d -m u:«${D}»:rwx /home/disk1/users/${D} setfacl -R -m u:«${D}»:rwx /home/disk1/users/${D}

fi

</pre>