操作系统安全：samba匿名访问配置(实验二).docx

实验二：Samba匿名访问配置一、实验目的1、掌握Samba匿名访问控制配置2、掌握访问Samba服务器的共享文件二、实验内容与步骤Samba匿名访问控制配置公共匿名类共享目录的配置（即匿名账户访问共享目录或文件）# vim /etc/samba/smb. conf#设置smb. conf配置文件rootglocalhost vim /etc/samba/smb. conf|图5：设置smb. conf配置文件globalworkgroup = WORKGROUP#设置主机工作组server string = Samba Server Version %v#samba服务注释workgroup = MYGROUPserver string = Samba Server Version %vlog level = 1#设置日志文件安全级别为1log file = /var/log/samba/%m#设置H志文件名称，如以IP地址为名称max log size = 50#设置日志文件最大容量50KB, 0表示不限制# logs split per machinelog level=l|log file = /var/log/samba/log.# max 50KB per log file, then rotatemax log size = 50security = share#以5卜6验证方式访问passdb backend = tdbsam#定义用户后台类型security = share|passdb backend = tdbsamload printers = no#关闭打印共享功能cups options = raw#打印机选项load printers = no|cups options = rawusersharecomment = Home Directories#共享文件描述path = /home/shareuser#共享路径browseable = yes#共享文件可以浏览writable = yes#共享文件可写;read only = yes#共享文件可读，不能与writable共用guest ok = yes#允许guest用户访问comment = Home Directories path = /home/shareuser browseable = yes writable = yes quest ok = yes# /etc/ini t. d/smb restart#重启samba服务、 .dy J %<9A j w j f w确定确定rooWlocalhost /etc/init. d/smb restart 关闭SMB服务： 启动SMB服务：图6：重启samba服务 新建/home/shareuser目录，并设置属组属主为nobody。 ttmkdir /home/shareuserttchown -R nobody:nobody /home/shareuser/# /etc/init. d/smb restart重启服务/etc/init. d/nmb restart 测试smb. conf配置是否正确： #testparmrootlocalhostmkdir /home/shareuserrooWlocalhostch own -R nobody： nobody /home/shareuser/rooWlocalhost /etc/init. d/smb restart关闭SMB服务：确定启动SMB服务：确定rooWlocalhost/etc/init. d/nmb restart关闭NMB服务：失败启动NMB服务：确定rooWlocalhosttestparmLoad smb config files from /etc/samba/smb. conf rlimit_max： increasing rlimit.max (1024) to minimum Windows limit (16384) Processing section ”homes”图7：新建/home/shareuser 目录2、访问Samba服务器的共享文件1 )> centOS系统测试:# yum -y install samba-client #在线安装samba-client才能使用smbclient命令 # smbclicnt /127. 0. 0. 1/sharc/homc/sharcuserWARNING: The security二share option is deprecatedEnter root, s password:由于匿名访问不需要密码，可直接回车即可smb: >q 退出访问rootlocal.host T# smbclient /127. 0. 0. 1/home/shareuser WARNING： The security:share option is deprecated Enter root's password：图8： ccntOS系统测试2)、windows系统下的共享访问172. 172. 0. 10homeshareuser