Samba匿名共享

安装相关软件：
yum -y install samba samba-client

启动Samba服务：
service smb start

设置开机自动启动Samba服务：
chkconfig --level 35 smb on

插入防火墙规则：（打开TCP 139,445端口）
iptables -I INPUT -p tcp -m multiport --dport 139,445 -j ACCEPT

插入防火墙规则：（打开UDP 137,138端口）
iptables -I INPUT -p udp -m multiport --dport 137,138 -j ACCEPT

笺注：加上参数 -m multiport 就可以一次性打开多个端口

保存防火墙规则：
[root@localhost ~]# iptables-save > /etc/sysconfig/iptables

查看防火墙的filter表：
[root@localhost ~]# iptables -nL --line

查看防火墙的配置文件：
[root@localhost ~]# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.4.7 on Thu Jul  5 04:45:37 2018
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [48:6200]
-A INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 139,445 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Thu Jul  5 04:45:37 2018

必须要关闭SELinux：（否则客户端将无法访问共享文件夹的！！）
setenforce 0
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

查看Samba的配置文件： /etc/samba/smb.conf

[root@localhost ~]#cat /etc/samba/smb.conf |grep -v "^#"|grep -v "^;"|grep -v "^$"

[global]
workgroup = MYGROUP
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
security = user
passdb backend = tdbsam
load printers = yes
cups options = raw
[homes]
comment = Home Directories
browseable = no
writable = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes

匿名共享：

修改samba的配置文件：

“MYGROUP”改成“WORKGROUP”：（WORKGROUP是Windows默认的工作组名字）
sed -i 's/workgroup = MYGROUP/workgroup = WORKGROUP/g' /etc/samba/smb.conf

“security”指定samba的安全等级。share：匿名用户不需要输入账户及密码即可访问共享。
sed -i 's/security = user/security = share/g' /etc/samba/smb.conf

不加载打印机：
sed -i 's/load printers = yes/load printers = no/g' /etc/samba/smb.conf

创建共享：
cat >>/etc/samba/smb.conf<< EOF
[共享文件夹]
      comment = share
      path = /share
      browseable = yes
      public = yes
writeable = no
EOF

创建共享文件夹（权限为777）
mkdir -p /share
touch /share/test.txt
chmod -R 777 /share/

测试配置的smb.conf是否正确，用下面的命令：
[root@localhost ~]#  testparm

修改了配置文件后，记得重新启动Samba服务：