{"id":1291,"date":"2014-10-04T01:21:27","date_gmt":"2014-10-04T07:21:27","guid":{"rendered":"http:\/\/blog.supportpro.com\/?p=1291"},"modified":"2019-08-26T01:44:31","modified_gmt":"2019-08-26T07:44:31","slug":"samba-server-setup-and-cifs-mount","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/samba-server-setup-and-cifs-mount\/","title":{"rendered":"Samba Server Setup and CIFS Mount"},"content":{"rendered":"

Samba is a free software re-implementation of the SMB\/CIFS networking protocol. We need to set up and configure samba server where the drive to share or mount is located.<\/p>\n

Samba Server uses the following port no. :
\n137\/tcp
\n137\/udp
\n138\/tcp
\n138\/udp
\n139\/udp
\n139\/udp
\n445\/tcp
\n445\/udp<\/p>\n

Daemon name: smb and nmb Samba services are implemented as two daemons: smbd, which provides the file and printer sharing services, and nmbd, which provides the NetBIOS-to-IP-address name service. NetBIOS over TCP\/IP requires some method for mapping NetBIOS computer names to the IP addresses of a TCP\/IP network.<\/p>\n

How to install and configure samba server:<\/strong><\/p>\n

Step 1<\/strong>: Install through yum command. cups-libs is for printer.<\/p>\n

#yum install samba samba-commons cups-libs<\/em><\/p>\n

Step 2<\/strong>: create a directory which you would like to share
\n#mkdir \/shared<\/em><\/p>\n

Step 3<\/strong>: Add a new group or you can use an existing group to provide access on a shared directory, Here I am adding a new group called staff.
\n#groupadd staff<\/em><\/p>\n

Step 4<\/strong>: Change the group and permission of sharing folder
\n#chgrp -R staff \/shared\u00a0 chmod -R 777 \/shared<\/em><\/p>\n

Step 5<\/strong>: Change the SELinux security context on sharing directory and set the SELinux boolean value for samba.
\nYou can skip this step if selinux has permissive or disabled status. (use sestatus command to check selinux status)
\n#chcon -R -t samba_share_t \/shared\/<\/em>
\n#semanage fcontext -a -t samba_share_t \/shared\/<\/em>
\n#setsebool -P samba_enable_home_dirs on<\/em><\/p>\n

Step 6<\/strong>: create user and add them in group called staff. And set the samba password for this user.
\n#useradd test<\/em>
\n#usermod -G staff test<\/em>
\nSet Password, here test123
\n#smbpasswd -a test<\/em>
\nNew SMB password:
\nRetype new SMB password:
\n#tdbsam_open<\/em>: Converting version 0.0 database to version 4.0.
\n#tdbsam_convert_backup<\/em>: updated \/var\/lib\/samba\/private\/passdb.tdb file.<\/p>\n

Step 7<\/strong>: Take backup of \/etc\/samba\/smb.conf file then edit the smb.conf file.
\n#cd \/etc\/samba\/<\/em>
\n#cp -p smb.conf smb.conf.orig<\/em>
\nAnd add the below given parameters in last line of\u00a0 samba config file \/etc\/samba\/smb.conf file
\n#vi \/etc\/samba\/smb.conf<\/em><\/p>\n

[backup]
\ncomment = shared-directory
\npath = \/shared
\npublic = no
\nvalid users = test, @staff
\nwritable = yes
\nbrowseable = yes
\ncreate mask = 0777
\ndirectory mask = 777
\nforce directory mode = 755
\nforce group = root
\nforce create mode = 644
\nforce user = root
\ncreate mode = 644
\ndirectory mode = 775<\/p>\n

The name in square braces is the name that we are referring while doing mount from remote server<\/p>\n

Step 8<\/strong>: Edit these lines in \/etc\/samba\/smb.conf . To allow network to reach samba server.<\/p>\n

Change the value of 192.168.0.0\/24 with your subnet. And change the ethernet value which is in use by your system and which you want to allow for traffic.
\nIn second line ,192.168.0. is for subnet .Same rule applied to 127. which is for loopback.<\/p>\n

#vi \/etc\/samba\/smb.conf<\/em><\/p>\n

interfaces = lo eth0 eth1 192.168.0.0\/24
\nhosts allow = xxx.xxx.xxx.xxx<\/p>\n

Please test the syntax on the config file using ‘testparm \/etc\/samba\/smb.conf’\u00a0<\/em> after the changes.<\/p>\n

Note: Mainly for Windows users, if your all PC in your network are using different WORKGROUP name edit the given below line in smb.conf with your workgroup name. Windows system by default uses the WORKGROUP as WORKGROUP. Try first without changing the WORKGROUP name, if required do the change.<\/p>\n

workgroup = MYGROUP<\/p>\n

Step 9:<\/strong>\u00a0Add services in \/etc\/services files
\n#vi \/etc\/services<\/em><\/p>\n

netbios-ns\u00a0\u00a0\u00a0 137\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # netbios name service
\nnetbios-ns\u00a0\u00a0\u00a0 137\/udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # netbios name service
\nnetbios-dgm\u00a0\u00a0\u00a0 138\/tcp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # netbios datagram service
\nnetbios-dgm\u00a0\u00a0\u00a0 138\/udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # netbios datagram service
\nnetbios-ssn\u00a0\u00a0\u00a0 139\/udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # netbios session service
\nnetbios-ssn\u00a0\u00a0\u00a0 139\/udp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # netbios session service<\/p>\n

Step 10<\/strong>: Add iptables rule in samba server for port no. 137,138.139 and 445.<\/p>\n

Edit \/etc\/sysconfig\/iptables file<\/p>\n

Note: If in your network iptables service is stopped or there is no rule set up.Kindly skip this step. Change the 192.168.1.0\/24 value with you network subnet.<\/p>\n

vi \/etc\/sysconfig\/iptables<\/em><\/p>\n

Add the below lines\u00a0 to the file \/etc\/sysconfig\/iptables just before COMMIT or open the ports for the IPs<\/p>\n

-A INPUT -s 192.168.1.0\/24 -m state \u2013state NEW -p tcp \u2013dport 137 -j ACCEPT
\n-A INPUT -s 192.168.1.0\/24 -m state \u2013state NEW -p tcp \u2013dport 138 -j ACCEPT
\n-A INPUT -s 192.168.1.0\/24 -m state \u2013state NEW -p tcp \u2013dport 139 -j ACCEPT
\n-A INPUT -s 192.168.1.0\/24 -m state \u2013state NEW -p tcp \u2013dport 445 -j ACCEPT<\/p>\n

Now save and restart the iptables<\/p>\n

Step 11<\/strong>: Now start the smb and nmb services.<\/p>\n

#\/etc\/init.d\/smb start<\/em>
\n#\/etc\/init.d\/nmb start<\/em>
\n#chkconfig smb on<\/em>
\n#chkconfig nmb on<\/em><\/p>\n

Step 12<\/strong>: Now we will test samba from linux<\/p>\n

#mount -t cifs \/\/samba-server-ipaddress\/shared-directory-name -o username=USERNAME \/mnt\/<\/em><\/p>\n

In our Example:
\n#mount -t cifs \/\/xxx.xxx.xxx.xxx\/shared -p username=test password=test123 \/backup<\/em>
\nFstab entry (\/etc\/fstab)
\n\/\/xxx.xxx.xxx.xxx<\/em>\/shared \/backup cifs\u00a0 username=test,password=test123,rw 0 0
\n# df -h |grep backup<\/em>
\n\/\/xxx.xxx.xxx.xxx<\/em>\/shared\u00a0 917G\u00a0\u00a0 17G\u00a0 854G\u00a0\u00a0 2% \/backup<\/p>\n

Windows User:<\/p>\n

Open the Run and type \\\\ip-address-of-samba-server\\shared-Direcory-name<\/p>\n

eg :\u00a0 \\\\xxx.xxx.xxx.xxx<\/em>\\shared<\/p>\n

Give username and password. here the suername is \u201ctest\u201d and the password is \u201ctest123\u2033<\/p>\n

If you require help, contact SupportPRO Server Admin<\/a><\/p>\n

\"Server<\/a><\/span>