Samba - Revision history

T1t0: /* test */

2026-01-20T08:17:55Z

test

← Older revision		Revision as of 08:17, 20 January 2026
Line 153:		Line 153:

	<pre>		<pre>
	smbclient -U YOUR_USER ~~-c ls~~ "//SERVER NAME/SHARED_FOLDER_NAME"		smbclient -U YOUR_USER "//SERVER NAME/SHARED_FOLDER_NAME" -c ls
	</pre>		</pre>

	~~[[Category:unix]]~~
	[[Category:linux]]		[[Category:linux]]
	[[Category:debian]]		[[Category:debian]]

T1t0 at 17:57, 29 September 2025

2025-09-29T17:57:48Z

← Older revision		Revision as of 17:57, 29 September 2025
Line 10:		Line 10:

	== Config ==		== Config ==

			from https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server#Creating_a_Basic_authenticated_access_smb.conf_File

	* edit /etc/samba/smb.conf file		* edit /etc/samba/smb.conf file
Line 18:		Line 20:
	#### Browsing/Identification ####		#### Browsing/Identification ####

	bind interfaces only = yes		bind interfaces only = yes

	# workgroup/NT-domain name your Samba server will part of		# workgroup/NT-domain name your Samba server will part of
	workgroup = WORKGROUP		workgroup = WORKGROUP

	# describe the server to the clients		# describe the server to the clients
	server string = %h server		server string = %h server

	# tells the NMBD component of Samba to ~~disable~~ its WINS Server		# tells the NMBD component of Samba to enable its WINS Server
	# you should NEVER set this to yes on more than one machine in your network		# you should NEVER set this to yes on more than one machine in your network
	wins support = no		wins support = yes

			# determine naming services to use and in what order to resolve host names to IP addresses
			name resolve order = wins bcast

	# allow the host to participate in master browser elections		# allow the host to participate in master browser elections
	local master = yes		local master = yes

	# force a local browser election upon startup		# force a local browser election upon startup
	# we need that otherwise it takes a long time before the windows network is browsable		# we need that otherwise it takes a long time before the windows network is browsable
	preferred master = yes		preferred master = yes

	# prevent nmbd to search for NetBIOS names through DNS.		# prevent nmbd to search for NetBIOS names through DNS.
	dns proxy = no		dns proxy = no

	# used by Windows NT and known as CIFS		# used by Windows NT and known as CIFS
	server min protocol = NT1		server min protocol = NT1

	# native SMB transport encryption available in SMB version 3.0		# native SMB transport encryption available in SMB version 3.0
	smb encrypt = desired		smb encrypt = desired

	#### Debugging/Accounting ####		#### Debugging/Accounting ####

	log file = /var/log/samba/samba.log		log file = /var/log/samba/samba.log
	log level = 1 auth:5 winbind:5 passdb:5		log level = 1 auth:5 winbind:5 passdb:5
	max log size = 1000		max log size = 1000

	#### Authentication ####		#### Authentication ####

	# defines in which mode Samba will operate		# defines in which mode Samba will operate
	server role = standalone server		server role = standalone server

	# netbios is the only available form of browsing in all windows versions except for 2000 and XP		# netbios is the only available form of browsing in all windows versions except for 2000 and XP
	disable netbios = no		disable netbios = no

	# a client must first "log-on" with a valid username and password		# a client must first "log-on" with a valid username and password
	security = user		security = user

	invalid users = root		invalid users = root
	create mode = 0664		create mode = 0664
	directory mode = 2775		directory mode = 2775

	passdb backend = tdbsam:/etc/samba/smbpasswd		passdb backend = tdbsam:/etc/samba/smbpasswd
	~~encrypt passwords = yes~~

	# unsuccessful authentication attempts are mapped to anonymous connections		# unsuccessful authentication attempts are mapped to anonymous connections
	map to guest = Bad User		map to guest = Bad User

	# disallow users who've been granted usershare privileges to create public shares		# disallow users who've been granted usershare privileges to create public shares
	usershare allow guests = no		usershare allow guests = no

	#======================= Share Definitions =======================		#======================= Share Definitions =======================

	[~~public]~~		[network]
	~~path = /home/shared/~~network~~/public~~		path = /home/shared/network
	~~comment = public folder~~		comment = protected folder

	~~browseable = yes~~
	~~read only = no~~
	~~writable = yes~~

	~~guest ok = yes~~

	~~force user = nobody~~
	~~force group = users~~

	~~[protected~~]
	path = /home/shared/network~~/protected~~
	comment = protected folder

	browseable = yes		browseable = yes
	read only = no		read only = no
	writable = yes		writable = yes

	guest ok = no		guest ok = no

	valid users = network-user		valid users = network-user
	force user = nobody		force user = nobody
	force group = users		force group = users
	</pre>		</pre>

T1t0 at 09:25, 9 August 2023

2023-08-09T09:25:35Z

← Older revision		Revision as of 09:25, 9 August 2023
Line 168:		Line 168:
	[[Category:linux]]		[[Category:linux]]
	[[Category:debian]]		[[Category:debian]]
	[[Category:~~services~~]]		[[Category:service]]
	[[Category:network]]		[[Category:network]]
	[[Category:filesystem]]		[[Category:filesystem]]

T1t0 at 09:13, 9 August 2023

2023-08-09T09:13:52Z

← Older revision		Revision as of 09:13, 9 August 2023
Line 170:		Line 170:
	[[Category:services]]		[[Category:services]]
	[[Category:network]]		[[Category:network]]
			[[Category:filesystem]]

T1t0 at 09:13, 9 August 2023

2023-08-09T09:13:14Z

← Older revision		Revision as of 09:13, 9 August 2023
Line 165:		Line 165:
	</pre>		</pre>

			[[Category:unix]]
			[[Category:linux]]
			[[Category:debian]]
			[[Category:services]]
	[[Category:network]]		[[Category:network]]
	~~[[Category:services]]~~

T1t0: /* test */

2022-08-10T22:22:12Z

test

← Older revision		Revision as of 22:22, 10 August 2022
Line 141:		Line 141:

	== test ==		== test ==

			* list servers

	<pre>		<pre>
	smbclient -U YOUR_USER -c ls //~~YOUR_SERVER_NAME~~/~~YOUR_SHARED_FOLDER_NAME~~		nmblookup -S '*'
			</pre>

			* list unprotected shared resource on server

			<pre>
			smbclient -N -L "SERVER NAME"
			</pre>

			* or list protected shared resource on server
			<pre>
			smbclient -U YOUR_USER -L "SERVER NAME"
			</pre>

			* list files on a shared folder

			<pre>
			smbclient -U YOUR_USER -c ls "//SERVER NAME/SHARED_FOLDER_NAME"
	</pre>		</pre>

	[[Category:network]]		[[Category:network]]
	[[Category:services]]		[[Category:services]]

T1t0 at 21:23, 5 July 2022

2022-07-05T21:23:55Z

← Older revision		Revision as of 21:23, 5 July 2022
Line 139:		Line 139:
	systemctl start smbd.service		systemctl start smbd.service
	</pre>		</pre>

			== test ==

			<pre>
			smbclient -U YOUR_USER -c ls //YOUR_SERVER_NAME/YOUR_SHARED_FOLDER_NAME
			</pre>

			[[Category:network]]
			[[Category:services]]

T1t0: /* Config */

2021-12-30T11:42:56Z

Config

← Older revision		Revision as of 11:42, 30 December 2021
Line 126:		Line 126:
	smbpasswd -e network-user		smbpasswd -e network-user
	</pre>		</pre>

			* about default permissions on file creation and moving, needs ACL:

			https://unix.stackexchange.com/questions/12842/make-all-new-files-in-a-directory-accessible-to-a-group

			https://superuser.com/questions/237802/how-to-set-default-permissions-for-files-moved-or-copied-to-a-directory

	== start ==		== start ==

T1t0: /* Config */

2020-10-23T04:00:06Z

Config

← Older revision		Revision as of 04:00, 23 October 2020
Line 49:		Line 49:

	log file = /var/log/samba/samba.log		log file = /var/log/samba/samba.log
	log level = ~~3 passdb~~:5 ~~auth~~:5		log level = 1 auth:5 winbind:5 passdb:5
	max log size = 1000		max log size = 1000

Line 64:		Line 64:

	invalid users = root		invalid users = root
	create ~~mask~~ = 0664		create mode = 0664
	directory ~~create mask~~ = 2775		directory mode = 2775

	passdb backend = tdbsam:/etc/samba/smbpasswd		passdb backend = tdbsam:/etc/samba/smbpasswd
Line 71:		Line 71:

	# unsuccessful authentication attempts are mapped to anonymous connections		# unsuccessful authentication attempts are mapped to anonymous connections
	map to guest = ~~bad user~~		map to guest = Bad User

	# disallow users who've been granted usershare privileges to create public shares		# disallow users who've been granted usershare privileges to create public shares

T1t0 at 03:26, 23 October 2020

2020-10-23T03:26:58Z

← Older revision		Revision as of 03:26, 23 October 2020
Line 101:		Line 101:
	guest ok = no		guest ok = no

	valid users = network		valid users = network-user
	force user = nobody		force user = nobody
	force group = users		force group = users
			</pre>

			* create a system 'network-user' user

			<pre>
			useradd -M -d /home/shared/network -s /usr/sbin/nologin -g nogroup network-user
	</pre>		</pre>

Line 109:		Line 115:

	<pre>		<pre>
	mkdir -p /home/shared/network/public		mkdir -p /home/shared/network/public /home/shared/network/protected
	~~mkdir -p~~ /home/shared/network/protected		chown -R nobody:users /home/shared/network
	chown nobody:users /home/shared/network~~/public /home/shared/network/protected~~
	chmod -R 0775 /home/shared/network		chmod -R 0775 /home/shared/network
	</pre>		</pre>

	* create a samba 'network' user and enable it		* create a samba network-user user and enable it

	<pre>		<pre>
	smbpasswd -a network		smbpasswd -a network-user
	smbpasswd -e network		smbpasswd -e network-user
	</pre>		</pre>