Samba升级指南.docx

一.升级需知1.备份最重要：在samba升级之前，请一定做好相关文件的备份。CentOS默认samba的密码文件、配置都保存在/etc/samba目录。相关命令1. #rsync-av/etc/samba/etc/samba.old/ 2. #cp /etc/init./smb /etc/init.d/smb.bak samba密码文件：passdb.tdb、schannel_store.tdb、secrets.tdbsamba配置文件：smb.conf2.在升级前，请先仔细参考相关的升级文档。如果对新版本一无所知，那么你为何要去升级它呢？下面是Samba 3.4版本的一些变化：MajorenhancementsinSamba3.4.0include:1. Configurationchanges: 2. oThedefaultpassdbbackendhasbeenchangedtotdbsam! 3. 4. Generalchanges: 5. oSamba4andSamba3sourcesareincludedinthetarball 6. 7. AuthenticationChanges: 8. oChangedthewaysmbdhandlesuntrusteddomainnamesgivenduringuser 9. authentication. 10. 11. PrintingChanges: 12. oVariousfixesincludingprinterchangenotificiationforSambaspoolssprintservers. 13. 14. Configurationchanges 15. = 16. !ATTENTION! 17. Thedefaultpassdbbackendhasbeenchangedtotdbsam!Thatbreaksexisting 18. setupsusingthesmbpasswdbackendwithoutexplicitdeclaration!Pleaseuse 19. passdbbackend=smbpasswdifyouwouldliketosticktothesmbpasswd 20. backendorconvertyoursmbpasswdentriesusinge.g.pdbedit-ismbpasswd-e 21. tdbsam. 22. 23. Thetdbsambackendismuchmoreflexibleconcerningperusersettings 24. likeprofilepathorhomedirectoryandtherearesomecommandswhichdonot 25. workwiththesmbpasswdbackendatall. 3.samba的一些说明1)Samba配置文件samba的配置文件是smb.conf，这个文件通常位于/etc/samba/smb.conf 或 /usr/local/samba/lib/smb.conf你可以通过#testparm /etc/samba/smb.conf命令来验证配置文件是否有错。2）Samba密码文件Samba-3默认使用tdbsam方式来存储密码，使用下面的命令来确认：#grep passdb /etc/samba/smb.conf存储samba密码等敏感信息的tdb数据库文件位置默认是:/etc/samba/，可以通过下面的命令确认：相关命令1. #smbd-b|grepPRIVATE_DIR 2. PRIVATE_DIR:/etc/samba 3. 4. #smbd-b|grepPRIVATE_DIR#CentOS默认路径 5. SRCDIR:/builddir/build/BUILD/samba-3.0.28/source 6. BUILDDIR:/builddir/build/BUILD/samba-3.0.28/source 7. SBINDIR:/usr/sbin 8. BINDIR:/usr/bin 9. SWATDIR:/usr/share/swat 10. LIBDIR:/usr/lib/samba 11. LOCKDIR:/var/cache/samba 12. PIDDIR:/var/run 13. PRIVATE_DIR:/etc/samba 14. 15. #smbd-b|grepDIR#编译、安装、启动新版本后 16. SRCDIR:/usr/src/samba-3.4.3/source3 17. BUILDDIR:/usr/src/samba-3.4.3/source3 18. SBINDIR:/usr/local/samba/sbin 19. BINDIR:/usr/local/samba/bin 20. SWATDIR:/usr/local/samba/swat 21. LIBDIR:/usr/local/samba/lib 22. MODULESDIR:/usr/local/samba/lib 23. LOCKDIR:/usr/local/samba/var/locks 24. STATEDIR:/usr/local/samba/var/locks 25. CACHEDIR:/usr/local/samba/var/locks 26. PIDDIR:/usr/local/samba/var/locks 27. PRIVATE_DIR:/usr/local/samba/private 二、下载解压下载新版Samba安装文件（这里以samba 3.4.3为例）：/相关命令1. #rpm-qsamba#确认当前samba版本 2. samba-3.0.33-3.14.el5 3. #cd/usr/src/ 4. #wget/samba/ftp/stable/samba-3.4.3.tar.gz 5. #tar-xvfsamba-3.4.3.tar.gz 6. #cdsamba-3.4.3 三、编译安装 Samba 3.4.3目录中有source3和source4两个samba版本。source3为Samba稳定的3.4.3版本，source4为Samba 4预览版，目前还在测试中。相关命令1. #cdsource3/ 2. #./autogen.sh#自动生成适合当前系统的configure脚本 3. #./configurehelp#获取可用的configure参数 4. #./configure-with-automount -with-quotas 5. #make 6. #makeinstall samba安装目录的相关参数，其它请参考./configure help相关参数1. Installationdirectories: 2. -prefix=PREFIXinstallarchitecture-independentfilesinPREFIX 3. /usr/local/samba 4. -exec-prefix=EPREFIXinstallarchitecture-dependentfilesinEPREFIX 5. PREFIX 6. Bydefault,makeinstallwillinstallallthefilesin/usr/local/samba/bin,/usr/local/samba/libetc.Youcanspecifyaninstallationprefixotherthan/usr/local/sambausing-prefix,forinstance-prefix=$HOME. 7. 8. Finetuningoftheinstallationdirectories: 9. -bindir=DIRuserexecutablesEPREFIX/bin 10. -sbindir=DIRsystemadminexecutablesEPREFIX/sbin 11. -libexecdir=DIRprogramexecutablesEPREFIX/libexec 12. -datadir=DIRread-onlyarchitecture-independentdataPREFIX/share 13. -sysconfdir=DIRread-onlysingle-machinedataPREFIX/etc 14. -sharedstatedir=DIRmodifiablearchitecture-independentdataPREFIX/com 15. -localstatedir=DIRmodifiablesingle-machinedataPREFIX/var 16. -libdir=DIRobjectcodelibrariesEPREFIX/lib 17. -includedir=DIRCheaderfilesPREFIX/include 18. -oldincludedir=DIRCheaderfilesfornon-gcc/usr/include 19. -infodir=DIRinfodocumentationPREFIX/info 20. -mandir=DIRmandocumentationPREFIX/man 21. -with-privatedir=DIRWheretoputsmbpasswd($ac_default_prefix/private) 22. -with-lockdir=DIRWheretoputlockfiles($ac_default_prefix/var/locks) 23. -with-configdir=DIR Directory that Samba daemons will use for locating configuration files. Samba编译的时候默认提供了Active Directory支持。如果不需要此功能，可以手工编辑include/config.h ，把下面两行的1修改为0.相关命令1. /*Whetherkerberosisavailable*/ 2. #defineHAVE_KRB51 3. /*Whetherldapisavailable*/ 4. #defineHAVE_LDAP1 安装完成。哇，真是简单。四、启用新版本Samba1.先让我们看一下，安装后的Samba目录。密码文件：passdb.tdb、schannel_store.tdb、secrets.tdb、smbpasswd应该位于/usr/local/samba/private目录。配置文件：smb.conf应该位于/usr/local/samba/lib目录。所以，我们也需要将配置文件和密码文件复制到相应的目录。当然，我们要删除旧的Samba版本。相关命令1. #cd/usr/local/samba/#默认安装在/usr/local/samba/目录 2. #ls 3. binincludelibmanprivatesbinshareswatvar 4. #lsbin/ 5. eventlogadmldbmodifyntlm_authsmbcaclssmbpasswdtdbbackup 6. findsmbldbrenamepdbeditsmbclientsmbspooltdbdump 7. ldbaddldbsearchprofilessmbcontrolsmbstatustdbtool 8. ldbdelnetrpcclientsmbcquotassmbtartestparm 9. ldbeditnmblookupsharesecsmbgetsmbtreewbinfo 10. #lssbin/ 11. cifs.upcallmount.cifsnmbdsmbdswatumount.cifswinbinddls 12. #cp-v/etc/samba/*.tdb/usr/local/samba/private/ 13. #cp-v/etc/samba/smb.conf/usr/local/samba/lib/ 14. #rm -rfv /etc/samba/ 15. #./bin/smbpasswd#测试一下，如果出错： 16. smbpasswd:errorwhileloadingsharedlibraries:libtalloc.so.1: 17. ERROR:cannotopensharedobjectfile:Nosuchfileordirectory 18. 解决方法:vi/etc/ld.so.conf 19. 加入:/usr/local/samba/lib 20. 然后运行#ldconfig 21. #rpm-e-testsamba 22. error:Faileddependencies: 23. sambaisneededby(installed)system-config-samba-1.2.39-1.el5.noarch 24. #yumremovesystem-config-samba 25. #yum removesamba (不推荐直接使用rpm删除) 26. 27. 设置Samba路径Samba默认是安装在/usr/local/samba，因此安装完成后，可能bin、sbin目录下的程序以及man无法使用。解决办法： 28. a.修改/etc/profile (全局) 或者在.bash_profile,.bashrc 文件中加上对应路径（使用下面的脚本也是一个选择）例如# vim /.bash_profilePATH=$PATH:$HOME/bin:/usr/local/samba/bin:/usr/local/samba/sbin 29. b.增加man手册#vim /etc/man.confMANPATH /usr/local/samba/share/manMANPATH_MAP /usr/local/samba/bin /usr/local/samba/share/manMANPATH_MAP /usr/local/samba/sbin /usr/local/samba/share/man 2.启用新版本的Samba命令首先，还原一下smb服务#cp /etc/init.d/smb.bak /etc/init.d/smb#!/bin/sh for bin in ls -1 /usr/local/samba/bin docp -bv/usr/local/samba/bin/$bin /usr/bin/done for sbin in ls -1 /usr/local/samba/sbin docp -bv-s /usr/local/samba/sbin/$sbin /usr/sbin/done exit 0五、简单测试使用smbclient做个简单的测试。使用smbclient的时候，若提示找不到/etc/samba/smb.conf文件，则运行：# ln -s /usr/local/samba/lib/smb.conf /etc/samba/smb.conf 测试命令1. #smbclient-L/-Uroot 2. Enterpassword: 3. Domain=MYGROUPOS=UnixServer=Samba3.4.3 4. SharenameTypeComment 5. - 6. publicDisk 7. #smbclient//it-Uroot 8. Enterpassword: 9. Domain=MYGROUPOS=UnixServer=Samba3.4.3 10. smb: 六、其它1.How to Add Windows 7 on a Samba Domain Controller (PDC)Samba