企业应用案例
ZMM是一家网站设计公司,下面有运营部,设计部,开发部和运维部,为了加强部门的互联互通,优化工作流程和提高效率,现部署一台Samba服务器。
根据公司情况,需要创建5个一级目录,和公共目录下的四个共享目录;公共共享目录每个部门一个目录。部门内员工可以在部门的一级目录内建立目录和文件,在公共目录内的二级部门目录,可以互相访问;一级目录各部门不可互访,公共目录内可以。
1 创建各级共享目录
[root@localhost~]#
mkdir -p /ZMM/{sales,desgin,develop,ops,share/{sales,desgin,develop,ops}}
2 创建用户 为每个部门创建3个用户,并创建共享目录管理员
用脚本批量创建用户
vim userad.sh
#!/bin/bash
bumen=(sales desgin develop ops)
for i in ${ bumen[@] }
do
groupadd $i
for u in $(seq 1 2 3)
do
useradd -M -s /sbin/nologin -g ${i} ${i}$u
done
done
[root@localhost~]# chmod a+x useradd.sh
[root@localhost~]# sh useradd.sh
[root@localhost~]# smbpasswd -a sales1 #逐个为各个部门用户设置不同密码
3 修改Samba配置文件,设置共享权限
vim /etc/samba/smb.conf
###############################
[global]
workgroup = MYGROUP
server string = ZMM.corp share
log file = /var/log/samba/log.%m
max log size = 50
security = user
passdb backend = tdbsam
load printers = yes
cups options = raw
################################
[homes]
comment = Home Directories
browseable = no
writable = yes
###*******************###
[sales]
comment = sales share
path = /ZMM/sales
browseable = yes
guest ok = no
writable = no
writelist = @sales
###*******************###
[design]
comment = design share
path = /ZMM/design
browseable = yes
guest ok = no
writable = no
writelist = @design
###*******************###
[develop]
comment = develop share
path = /ZMM/develop
browseable = yes
guest ok = no
writable = no
writelist = @develop
###*******************###
[ops]
comment = ops share
path = /ZMM/ops
browseable = yes
guest ok = no
writable = no
writelist = @ops
###*******************###
[share]
comment = comment share
path = /ZMM/share
browseable = yes
guest ok = no
writable = yes
4 修改权限启动服务
[root@localhost~]# chmod 1770 /ZMM/{sales,design,develop,ops} #添加S位权限
[root@localhost~]# chmod 1777 /ZMM/share
[root@localhost~]# chown :sales /ZMM/sales
[root@localhost~]# chown :design /ZMM/design
[root@localhost~]# chown :develop /ZMM/develop
[root@localhost~]# chown :ops /ZMM/ops
[root@localhost~]# service smb start