[LINUX] samba summary

Server process

Server process Explanation
smbd File sharing, authentication, etc.
nmbd Browsing function, NetBIOS name resolution, WINS server, etc.
winbindd Winbind function

port number#

port number Explanation
137/UDP NetBIOS name resolution and browsing
138/UDP NetBIOS name resolution and domain logon
139/TCP File sharing
445/TCP File sharing


global section

--Set up the entire Samba. --If you make any changes, you will need to restart Samba. --If the item set in the global section appears in the following sections, the setting will be overwritten.

Parameters Explanation
workgroup Specify the workgroup name or domain name to which the Samba server belongs.
server role Specifies the operating mode of the Samba server.
netbios name Specify the NetBIOS name of the Samba server.
server string Describe the description such as the name of the server.
hosts allow Specify the hosts that are allowed to connect. (Hosts not specified will be rejected.)
guest account It is used when accessing a user who does not have an account as a guest.
map to guest Specifies what to do if you cannot authenticate as a Samba user.
Never :Do not allow guest authentication.
Bad User :If a non-existent user is specified, it is considered as guest authentication and login is performed with the user defined in guest account.
Bad Passwor :In addition to the above, if the password is entered incorrectly, it is considered as guest authentication.
log file Specify the log file. Variable indicating the connection source host "%If you use "m", you can separate the log file for each connection source host.
max log size Specifies the maximum size of the log file. If the value is 0, there is no limit.
encrypt passwords Use an encrypted password. This value should not be used except Yes.
smb passwd file Specify the password file for password authentication using the smbpasswd method.
unix password sync Do you want to synchronize your Samba password with your Linux password?
passwd program When unix password sync is enabled, the program to be executed when the password is changed on the Samba side.
passwd chat Response content when unix password sync is enabled.
username map Specifies a file that maps a UNIX user to another user.
logon script Specify the script file to be executed at logon.
wins support Operate as a WINS server.
wins server Specify the IP address of the WINS server.


Parameters Explanation
comment Specify a comment.
browseable Specifies whether to browse and display at other times. However, you can access it by specifying the share name directly.
writable Specifies whether to allow writing.
read only The opposite meaning of writable.
write list Specifies the users who are exceptionally allowed to write. When specifying a group, @
path Specify the path of the shared directory.
force user Forcibly set the owner and owning group of files and directories created in the share to the specified user.
force group Forces the owner and group of files and directories created in the share to be the specified group.
hide dot files Whether to apply hidden attributes.
hide files If you don't want to see any file or directory, specify its name.
veto files Specify files and directories that you do not want to see or access.
create mask Permission applicable to files 0744
directory mask Applicable permissions to directory 0755
force create mask Permission 0000 that always applies to files
force directory mask Permission 0000 that always applies to directories
valid users Specify who can access it. When specifying a group, @
guest ok Specifies whether to allow guest login.
public Specifies whether to allow guest login.


--A section for sharing each home directory of UNIX users at once. --You do not need to define a home directory share for each user.


 comment = Home Directiry
 browseable = No
 writable = Yes


Parameters Explanation
print ok Use as printer sharing.
printable Use as printer sharing.


 comment = ALL printers
 path = /var/spool/samba
 browseable = no
 guest ok = no
 writable = no
 printable = Yes


--You can create a share with any name.


 comment = Public
 path = /home/samba/piblic
 public = Yes
 writable = No
 writa list = @memmber


 comment = tmp
 path = /tmp
 read only = no
 public = Yes


 path = /var/samba/secret
 valid users = @super


--Check the syntax of smb.conf for mistakes.


--Samba handles logs on its own, without going through syslog. --It is divided into several files under the/var/log/samba directory.

Master browser settings

--Exists in workgroup units and domain units. ――Which host will be the master browser is selected based on the priority according to the type of OS. --If samba itself is a domain controller, it will be preferentially selected if it is 33 or higher.

Parameters Explanation
local master Participate in the browser selection of the local master browser (not necessarily selected)
domain master Be elected as a domain master browser.
preferred master Prompt to select a browser.
os level priority

Authentication settings


--Specify how the client responds to Samba.

Parameters Explanation
security The default is "USER".
In this case, authenticate using the smb passwd file.
You need a Samba user account and password.

User management


--User information is stored in a text format password file (/ etc/samba/smbpasswd) in one line per user using the method used in Samba2. --Although some Samba3 series are the default backend database, only some of the user items that Samba can handle can be stored.


passdb backend = smbpasswd


--Store user information in a binary database file (/etc/samba/passdb.tdb). --All items of user information that can be handled by Samba can be stored.


passdb backend = tdbsam:/etc/samba/passdb.tdb


--Store user information in the LDAP server. --A separate LDAP server is required, but it is suitable for handling a large number of users.


passdb backend = ldapsam:ldap://LDAP server name[:port number]



option Explanation
-L List display
-a add to
-x Delete


option Explanation
-d Invalidation
-e activation
-x Delete

Management command

command Explanation
smbcontrol Send messages to control each daemon that makes up the Samba server.
smbstatus Share clients connected to the Samba server, shares in use, and locked files.
nbmlookup Query the NetBIOS name or search for the IP address from the NetBIOS name.

Samba client (smbclient)

option Explanation
-L Request list display
-N Do not authenticate
-U Specify the user to connect to
Subcommand Explanation
cd Move
del Delete
Subcommand Explanation
dir List display
exit End
get Get
mget Get all together
mkdir Directory creation
mput Transfer all together
lcd Move local directory
put transfer
mdir Delete directory



vfs objects = acl_xattr
map acl inherit = yes
store dos attributes =yes


--Display ACL entries.

ACL entry Explanation
user Owner ①
group Owning group ②
other Other users ③
user:USER User USER ④
group:GROUP Group GROUP ⑤
mask Applies to mask values, ②④⑤


--Set ACL.

option Explanation
-m Add or change.
-x delete.
--remove-all Delete all.


Building a file server for Amazon EC2 (Amazon linux) Build Samba on Amazon Linux 2 (https://dev.classmethod.jp/articles/amazonlinux2-samba/)

Recommended Posts

samba summary
Python Summary
samba settings
Django Summary
python-pptx summary
Linux Summary
Python summary
Django Summary
pyenv summary
String summary 1
pytest summary
matplotlib summary
AtCoderBeginnerContest180 Review & Summary
Kaggle Summary: Outbrain # 2
LINQ library summary
Sphinx setup summary
AtCoderBeginnerContest181 Review & Summary
Digital technology summary
AtCoderBeginnerContest182 Review & Summary
Python tutorial summary
blockdiag grammar summary
AtCoderBeginnerContest183 Review & Summary
Linux Command Summary
AtCoderBeginnerContest179 Review & Summary
Kaggle Summary: Outbrain # 1
update, upgrade summary
Standard input summary
Django filter summary
python related summary
2020 IT Conference Summary
Visualize summary statistics
pytest usage summary
Docker command summary
Python basics summary
Kaggle related summary