samba 中的安全共享不起作用,为什么?

samba 中的安全共享不起作用,为什么?

我在 samba 中使用密码创建的安全共享似乎不起作用。

/etc/samba/smb.conf我的Linux Mint 盒子(3.13.0-37-generic)盒子上有以下内容。

[myshare]            
comment = Home Directory  
path = /home/myshare
valid users = myshare
browseable = no           
public = no               
security = user           
readable = yes            
writable = yes            
guest ok = no             
  • 用户的密码myshare是使用 创建的smbpasswd -a myshare,然后通过 启用的smbpasswd -e myshare
  • 添加用户时使用useradd -c "myshare" -m -s /bin/false myshare,因此它没有 shell 访问权限

smb.conf

[global]
workgroup = WORKGROUP    
dns proxy = no
;   wins server = w.x.y.z
;   interfaces = 127.0.0.0/8 eth0
;   bind interfaces only = yes

security = user
encrypt passwords = yes

log file = /var/log/samba/log.%m
max log size = 1000    
syslog = 0

panic action = /usr/share/samba/panic-action %d
server role = standalone server

passdb backend = tdbsam
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
map to guest = bad user

;   logon path = \\%N\profiles\%U
;   logon drive = H:
;   logon script = logon.cmd
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u  
; add group script = /usr/sbin/addgroup --force-badname %g
;   include = /home/samba/etc/smb.conf.%m
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash
;   usershare max shares = 100

usershare allow guests = yes

[homes]
comment = Home Directories
browseable = no
read only = yes
create mask = 0700
directory mask = 0700
valid users = %S

;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   read only = yes

;[profiles]
;   comment = Users profiles
;   path = /home/samba/profiles
;   guest ok = no
;   browseable = no
;   create mask = 0600
;   directory mask = 0700

[printers]
comment = All Printers
browseable = no
path = /var/spool/samba
printable = yes
guest ok = no
read only = yes
create mask = 0700

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = no
;   write list = root, @lpadmin

[myshare]
comment = Home Directory
path = /home/myshare
valid users = myshare
browseable = no
public = no
security = user
readable = yes
writable = yes
guest ok = no

现在我尝试重新启动该smbd服务,但是当我在 Windows 机器上映射共享时,它只是打开而不要求任何凭据。

我在这里缺少什么?

答案1

usershare allow guests = yes

我怀疑全球价值正在被覆盖。

相关内容