Differences

This shows you the differences between two versions of the page.

--- linux_wiki:network_services_overview_smb [2016/10/02 15:55]
billdozor [Network Services Overview SMB]
+++ linux_wiki:network_services_overview_smb [2019/05/25 23:50] (current)
@@ Line 12: / Line 12: @@
   * Configure the service for basic operation
   * Configure host-based and user-based security for the service
+----
+====== Lab Setup ======
+The following virtual machines will be used:
+  * server1.example.com (192.168.1.150) -> Perform all SMB client tests from here
+  * server2.example.com (192.168.1.151) -> Install the Samba Server here
 ----
@@ Line 17: / Line 25: @@
 ====== Install the packages needed to provide the service ======
-Install the service
+Install the service (server)
+<code bash>
+yum install samba samba-client
+</code>
+  * samba -> samba server
+  * samba-client -> samba client utilities
+Install the service (client)
 <code bash>
-yum install <service-name>
+yum install samba-client cifs-utils
 </code>
+  * samba-client -> samba client utilities
+  * cifs-utils -> includes command needed to mount remote SMB shares
 ----
@@ Line 27: / Line 44: @@
   * Service agnostic -> [[linux_wiki:set_enforcing_and_permissive_modes_for_selinux|Ensure SELinux is running and enabled (RHCSA objective)]].
+  * **IMPORTANT**: View all label types<code bash># Install package
+yum install setools-console
+# View all label types
+seinfo -t
+# Find Samba/SMB types
+seinfo -t | grep samba
+seinfo -t | grep smb
+</code>
 ----
@@ Line 42: / Line 69: @@
 Check Current Service Status
 <code bash>
-systemctl status <service-name>
+systemctl status smb
 </code>
   * Also displays if the service is enabled or disabled
@@ Line 49: / Line 76: @@
 Enabling a service to start on boot
 <code bash>
-systemctl enable <service-name>
+systemctl enable smb
 </code>
@@ Line 58: / Line 85: @@
 Enable and Start the service
 <code bash>
-systemctl enable <service-name>
+systemctl enable smb
-systemctl start <service-name>
+systemctl start smb
 </code>
@@ Line 70: / Line 97: @@
 Allow access through the firewall
 <code bash>
-firewall-cmd --permanent --add-service=<service-name>
+firewall-cmd --permanent --add-service=samba
 firewall-cmd --reload
 </code>
@@ Line 76: / Line 103: @@
 ===== Host Based =====
+Main samba config
+<code bash>
+vim /etc/samba/smb.conf
+[global]
+hosts allow = 192.168.1.
+</code>
+  * Allows all hosts in the 192.168.1.x network
+  * Allow list over rides deny lists (if any and they conflict)
 ===== User Based =====
+Main samba config
+<code bash>
+vim /etc/samba/smb.conf
+[share]
+valid users = dvader, yoda
+write list = dvader
+read list = yoda
+</code>
+  * valid users -> allowed to login to the service
+  * write list -> users that can write, even if the share is set to read only
+  * read list -> users that can read
 ----