samba可以用于linux和windows之间文件共享。
需要安装的软件包
samba-3.0.23c-2.i386.rpm
samba-client-3.0.23c-2.i386.rpm
samba-common-3.0.23c-2.i386.rpm
samba-swat-3.0.23c-2.i386.rpm
system-config-samba-1.2.39-1.el5.noarch.rpm
启动脚本：/etc/init.d/smb
配置文件：/etc/samba/smb.conf
实验完成了security安全级别为 share、user共享目录读写访问控制。
过程如下：
[chen@localhost 桌面]$ rpm -qa|grep samba samba-winbind-clients-3.5.4-68.el6.i686 samba-common-3.5.4-68.el6.i686 samba-client-3.5.4-68.el6.i686 [chen@localhost 桌面]$ chkconfig --list|grep smb [chen@localhost 桌面]$ yum list|grep samba *Note* Red Hat Network repositories are not listed below. You must run this command as root to access RHN repositories. samba-client.i686 3.5.4-68.el6 @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0 samba-common.i686 3.5.4-68.el6 @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0 samba-winbind-clients.i686 3.5.4-68.el6 @anaconda-RedHatEnterpriseLinux-201009221732.i386/6.0 samba.i686 3.5.4-68.el6 rhel-source samba-winbind.i686 3.5.4-68.el6 rhel-source sblim-cmpi-samba.i686 1.0-1.el6 rhel-source [chen@localhost 桌面]$ yum -y install samba* Loaded plugins: refresh-packagekit, rhnplugin *Note* Red Hat Network repositories are not listed below. You must run this command as root to access RHN repositories. You need to be root to perform this command. [chen@localhost 桌面]$ su - root 密码： [root@localhost ~]# yum -y install samba* Loaded plugins: refresh-packagekit, rhnplugin This system is not registered with RHN. RHN support will be disabled. rhel-source | 3.7 kB 00:00 ... Setting up Install Process Package samba-common-3.5.4-68.el6.i686 already installed and latest version Package samba-winbind-clients-3.5.4-68.el6.i686 already installed and latest version Package samba-client-3.5.4-68.el6.i686 already installed and latest version Resolving Dependencies --> Running transaction check ---> Package samba.i686 0:3.5.4-68.el6 set to be updated ---> Package samba-winbind.i686 0:3.5.4-68.el6 set to be updated --> Finished Dependency Resolution Dependencies Resolved ==================================================================================================== Package Arch Version Repository Size ==================================================================================================== Installing: samba i686 3.5.4-68.el6 rhel-source 5.0 M samba-winbind i686 3.5.4-68.el6 rhel-source 3.5 M Transaction Summary ==================================================================================================== Install 2 Package(s) Upgrade 0 Package(s) Total download size: 8.5 M Installed size: 30 M Downloading Packages: ---------------------------------------------------------------------------------------------------- Total 19 MB/s | 8.5 MB 00:00 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction Installing : samba-winbind-3.5.4-68.el6.i686 1/2 Installing : samba-3.5.4-68.el6.i686 2/2 Installed: samba.i686 0:3.5.4-68.el6 samba-winbind.i686 0:3.5.4-68.el6 Complete! [root@localhost ~]# chkconfig --list|grep smb smb 0:关闭 1:关闭 2:关闭 3:关闭 4:关闭 5:关闭 6:关闭 [root@localhost ~]# chkconfig smb on [root@localhost ~]# /etc/init.d/smb start 启动 SMB 服务： [确定] [root@localhost ~]# ls /etc/samba/ lmhosts smb.conf smbusers [root@localhost ~]# vim /etc/samba/smb.conf [root@localhost ~]# tail -8 /etc/samba/smb.conf [files] comment = Public Files Share path = /home/samba public = yes writable = yes printable = no [root@localhost ~]# 刚才的vim修改增加了最后那几行和把global下面到security改为了share^C [root@localhost ~]# /etc/init.d/smb restart 关闭 SMB 服务： [确定] 启动 SMB 服务： [确定] [root@localhost ~]# setenforce 0 [root@localhost ~]# smbclient //192.169.1.98/files #登陆不上，因为/home/samba目录还没有创建 Enter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] Server not using user level security and no password supplied. tree connect failed: NT_STATUS_BAD_NETWORK_NAME [root@localhost ~]# testparm Load smb config files from /etc/samba/smb.conf rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) Processing section "[homes]" Processing section "[printers]" Processing section "[files]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions [global] workgroup = MYGROUP server string = Samba Server Version %v security = SHARE log file = /var/log/samba/log.%m max log size = 50 cups options = raw [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [files] comment = Public Files Share path = /home/samba read only = No guest ok = Yes [root@localhost ~]# mkdir /home/samba [root@localhost ~]# chmod o+w /home/samba/ [root@localhost ~]# ls -ld /home/samba/ drwxr-xrwx. 2 root root 4096 8月 9 20:47 /home/samba/ [root@localhost ~]# smbclient //192.169.1.98/files Enter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] Server not using user level security and no password supplied. smb: \> ls . D 0 Thu Aug 9 20:47:01 2012 .. D 0 Thu Aug 9 20:47:01 2012 40317 blocks of size 262144. 26849 blocks available smb: \> ls . D 0 Thu Aug 9 20:49:30 2012 .. D 0 Thu Aug 9 20:47:01 2012 8.9samba A 19725 Thu Aug 9 11:38:38 2012 #这个文件是在虚拟机外面的windows中传上去的 40317 blocks of size 262144. 26848 blocks available smb: \> put 1 .gnote/ off .xauthnex4AK a .gnupg/ .printer-groups.xml .xauthQDpdMq anaconda-ks.cfg .gstreamer-0.10/ .pulse/ .xauths3w8PP .bash_history .gtk-bookmarks .pulse-cookie .xauthWHeJNQ .bash_logout .gvfs/ .recently-used.xbel .xauthzsGCtR .bash_profile .ICEauthority .ssh/ 公共的/ .bashrc .icons/ .tcshrc 模板/ .cache/ .imsettings.log .themes/ 视频/ .config/ install.log .thumbnails/ 图片/ .cshrc install.log.syslog .viminfo 文档/ .dbus/ .lesshst .xauthEjNjkE 下载/ .esd_auth .lftp/ .xauthH1M7lM 音乐/ .gconf/ .local/ .xauthiHGPWs 桌面/ .gconfd/ loginDir/ .xauthKSE2s2 .gnome2/ .nautilus/ .xauthmGZjkB smb: \> put a putting file a as \a (0.0 kb/s) (average 0.0 kb/s) smb: \> ls . D 0 Thu Aug 9 20:49:30 2012 .. D 0 Thu Aug 9 20:47:01 2012 a A 0 Thu Aug 9 20:50:27 2012 8.9samba A 19725 Thu Aug 9 11:38:38 2012 40317 blocks of size 262144. 26848 blocks available smb: \> get 8.9samba getting file \8.9samba of size 19725 as 8.9samba (6420.7 KiloBytes/sec) (average 6420.9 KiloBytes/sec) smb: \> quit [root@localhost ~]# ls 1 a install.log loginDir 公共的 视频 文档 音乐 8.9samba anaconda-ks.cfg install.log.syslog off 模板 图片 下载 桌面 [root@localhost ~]# #匿名用户可以登陆，且可以get，put -------------------------------需要用户名和密码验证------------------------------------- [root@localhost ~]# [root@localhost ~]# security=share不要用户名和密码的方式实验成功，下面测试security=users需要验证^C [root@localhost ~]# [root@localhost ~]# [root@localhost ~]# vim /etc/samba/smb.conf [root@localhost ~]# 把security=user，然后添加了以下10行^C [root@localhost ~]# tail -11 /etc/samba/smb.conf [movies] comment = This is a movies world! path = /var/public/movies public = no writable = yes printable = no valid users = user1 user2 @root write list = user1 @root directory mask = 0744 create mask = 0600 [root@localhost ~]# service smb restart 关闭 SMB 服务： [确定] 启动 SMB 服务： [确定] [root@localhost ~]# testparm Load smb config files from /etc/samba/smb.conf rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) Processing section "[homes]" Processing section "[printers]" Processing section "[files]" Processing section "[movies]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions [global] workgroup = MYGROUP server string = Samba Server Version %v log file = /var/log/samba/log.%m max log size = 50 cups options = raw [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [files] comment = Public Files Share path = /home/samba read only = No guest ok = Yes [movies] comment = This is a movies world! path = /var/public/movies valid users = user1, user2, @root write list = user1, @root read only = No create mask = 0600 directory mask = 0744 [root@localhost ~]# smbpasswd -a user1 New SMB password: Retype new SMB password: Added user user1. [root@localhost ~]# smbclient -U user1 //192.168.1.98/movies Enter user1's password: Connection to 192.168.1.98 failed (Error NT_STATUS_HOST_UNREACHABLE) [root@localhost ~]# setenforce 0 [root@localhost ~]# mkdir -p /var/public/movies [root@localhost ~]# chmod o+w /var/public/movies/ [root@localhost ~]# ls -ld /var/public/movies/ drwxr-xrwx. 2 root root 4096 8月 9 21:20 /var/public/movies/ [root@localhost ~]# smbclient -U user1 //192.168.1.98/movies #这里的ip地址写错了，所以登不上，囧。。。 Enter user1's password: Connection to 192.168.1.98 failed (Error NT_STATUS_HOST_UNREACHABLE) [root@localhost ~]# chmod o+w /var/public #这句话不加应该也可以的 [root@localhost ~]# service smb restart 关闭 SMB 服务： [确定] 启动 SMB 服务： [确定] [root@localhost ~]# smbclient -U user1 //192.169.1.98/movies Enter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 21:20:05 2012 .. D 0 Thu Aug 9 21:20:05 2012 40317 blocks of size 262144. 26847 blocks available smb: \> pwd Current directory is \\192.169.1.98\movies\ smb: \> put 1 .gnome2/ .nautilus/ .xauthmGZjkB 8.9samba .gnote/ off .xauthnex4AK a .gnupg/ .printer-groups.xml .xauthQDpdMq anaconda-ks.cfg .gstreamer-0.10/ .pulse/ .xauths3w8PP .bash_history .gtk-bookmarks .pulse-cookie .xauthWHeJNQ .bash_logout .gvfs/ .recently-used.xbel .xauthzsGCtR .bash_profile .ICEauthority .ssh/ 公共的/ .bashrc .icons/ .tcshrc 模板/ .cache/ .imsettings.log .themes/ 视频/ .config/ install.log .thumbnails/ 图片/ .cshrc install.log.syslog .viminfo 文档/ .dbus/ .lesshst .xauthEjNjkE 下载/ .esd_auth .lftp/ .xauthH1M7lM 音乐/ .gconf/ .local/ .xauthiHGPWs 桌面/ .gconfd/ loginDir/ .xauthKSE2s2 smb: \> put a putting file a as \a (0.0 kb/s) (average 0.0 kb/s) smb: \> ls . D 0 Thu Aug 9 21:22:21 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir user1dir1 smb: \> ls . D 0 Thu Aug 9 21:22:26 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 40317 blocks of size 262144. 26847 blocks available smb: \> ls . D 0 Thu Aug 9 21:23:23 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 #这个文件是在windows下拖进去的 user1dir1 D 0 Thu Aug 9 21:22:26 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# smbclient -U user2 //192.169.1.98/movies Enter user2's password: session setup failed: NT_STATUS_LOGON_FAILURE [root@localhost ~]# user2没有通过smbpasswd添加，所以登录不上去 -bash: user2没有通过smbpasswd添加，所以登录不上去: command not found [root@localhost ~]# id user2 #先看本地是否有user2用户 uid=503(user2) gid=503(user2) 组=503(user2) [root@localhost ~]# id chen #试一下没在valid users中的用户是否能登陆 uid=500(chen) gid=500(chen) 组=500(chen) [root@localhost ~]# smbpasswd -a user2 New SMB password: Retype new SMB password: Added user user2. [root@localhost ~]# smbpasswd -a chen New SMB password: Retype new SMB password: Added user chen. [root@localhost ~]# smbclient -U chen //192.169.1.98/movies Enter chen's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] tree connect failed: NT_STATUS_ACCESS_DENIED #登陆不上 [root@localhost ~]# smbclient -U user2 //192.169.1.98/movies Enter user2's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 21:23:23 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir user2dir2 #这里user2没在write list里面，但是还是能创建 smb: \> ls . D 0 Thu Aug 9 21:23:23 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 40317 blocks of size 262144. 26847 blocks available smb: \> put 1 #也能上传，这个是不应该的 putting file 1 as \1 (0.0 kb/s) (average 0.0 kb/s) smb: \> ls . D 0 Thu Aug 9 21:23:23 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit -----------------------下面是问题解决问题的试验过程，可能有不合理的地方---------------------------- [root@localhost ~]# cat /etc/group |grep user2 #看一下user2是否在root组里，因为刚才write list里有 @root user2:x:503: [root@localhost ~]# vim /etc/samba/smb.conf [root@localhost ~]# 把 @root从write list中删除了 #这里的vim把 @root从write list中删除了，write list只有user1了 -bash: 把 @root从write: command not found [root@localhost ~]# service smb restart 关闭 SMB 服务： [确定] 启动 SMB 服务： [确定] [root@localhost ~]# smbclient -U root //192.169.1.98/movies #用root登陆进去看是否能写 Enter root's password: session setup failed: NT_STATUS_LOGON_FAILURE [root@localhost ~]# smbpasswd -a root New SMB password: Retype new SMB password: Added user root. [root@localhost ~]# smbclient -U root //192.169.1.98/movies Enter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 21:49:55 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir rootdir3 #root还是可以写 smb: \> ls . D 0 Thu Aug 9 21:49:55 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# tail -11 /etc/samba/smb.conf #看一下配置文件 [movies] comment = This is a movies world! path = /var/public/movies public = no writable = yes printable = no valid users = user1 user2 @root write list = user1 directory mask = 0744 create mask = 0600 [root@localhost ~]# vim /etc/samba/smb.conf #把writable = yes删掉了 [root@localhost ~]# service smb restart 关闭 SMB 服务： [确定] 启动 SMB 服务： [确定] [root@localhost ~]# smbclient -U root //192.169.1.98/movies Enter root's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir rootdir4 NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \rootdir4 #哈哈。。这下写不了了，就是这个writable捣的鬼。 smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# smbclient -U user1 //192.169.1.98/movies Enter user1's password: session setup failed: NT_STATUS_LOGON_FAILURE [root@localhost ~]# smbpasswd -a user1 #上面密码可能输错了，又加了一遍 New SMB password: Retype new SMB password: [root@localhost ~]# smbclient -U user1 //192.169.1.98/movies #看看user1能不能写，应该是可以才对 Enter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir user1dir2 #的确可以，可见只要关掉writable，write list就完全起作用了 smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir2 D 0 Thu Aug 9 22:11:34 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# smbclient -U user2 //192.169.1.98/movies #再试试user2可不可以呢？应该也不行 Enter user2's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir2 D 0 Thu Aug 9 22:11:34 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir user2dir3 NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \user2dir3 #不行，再次验证 smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir2 D 0 Thu Aug 9 22:11:34 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# [root@localhost ~]# --------------测试selinux----------------------^C [root@localhost ~]# setenforce 1 [root@localhost ~]# smbclient -U user1 //192.169.1.98/movies Enter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir2 D 0 Thu Aug 9 22:11:34 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> mkdir user1dir3 NT_STATUS_ACCESS_DENIED making remote directory \user1dir3 #开selinux，就不能正常创建了，虽然user1有写权限 smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir2 D 0 Thu Aug 9 22:11:34 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# ls -dZ /var/public/movies/ #看一下movies的标签（上下文） drwxr-xrwx. root root unconfined_u:object_r:public_content_rw_t:s0 /var/public/movies/ [root@localhost ~]# chcon -t samba_share_t /var/public/movies/ #把标签改为samba_share_t [root@localhost ~]# ls -dZ /var/public/movies/ drwxr-xrwx. root root unconfined_u:object_r:samba_share_t:s0 /var/public/movies/ [root@localhost ~]# ls -Z /var/public/movies/ -rw-------. user2 user2 unconfined_u:object_r:public_content_rw_t:s0 1 -rw-------. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 8.9samba -rw-------. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 a drwxr--r--. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 dir1 drwxr--r--. user2 user2 unconfined_u:object_r:public_content_rw_t:s0 dir2 drwxr--r--. root root unconfined_u:object_r:public_content_rw_t:s0 dir3 drwxr--r--. user1 user1 unconfined_u:object_r:public_content_rw_t:s0 user1dir2 [root@localhost ~]# 这里面的文件都是public_content_rw_t这个标签，先不改，进去看是否能看到^C [root@localhost ~]# smbclient -U user1 //192.169.1.98/movies Enter user1's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> mkdir user1dir3 #可以创建了，原来的文件也可以看到，可能跟public_content_rw_t标签兼容有关，若是其他标签可能看不到，这时候需要把文件的标签页改过来 smb: \> ls . D 0 Thu Aug 9 22:07:58 2012 .. D 0 Thu Aug 9 21:20:05 2012 a 0 Thu Aug 9 21:22:21 2012 user1dir2 D 0 Thu Aug 9 22:11:34 2012 rootdir3 D 0 Thu Aug 9 22:07:58 2012 8.9samba 19725 Thu Aug 9 11:38:38 2012 user1dir1 D 0 Thu Aug 9 21:22:26 2012 user1dir3 D 0 Thu Aug 9 22:25:52 2012 user2dir2 D 0 Thu Aug 9 21:49:38 2012 1 0 Thu Aug 9 21:49:55 2012 40317 blocks of size 262144. 26847 blocks available smb: \> quit [root@localhost ~]# smbclient -U user2 //192.169.1.98/movies #再试试改完标签后user2是否可以 Enter user2's password: Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.5.4-68.el6] smb: \> mkdir user2dir1 NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \user2dir1 #还是不行的 smb: \> quit [root@localhost ~]#
ps：本文出处在：http://blog.csdn.net/chen_jp/article/details/7866625 ，供学习参考用。
如果涉及到侵权，请联系我！