Centos7下samba服务搭建及通过活动目录AD控制帐号

一、samba相关软件安装 yum install krb5-workstation krb5-devel pam_krb5 samba samba-client samba-winbind-clients -y 二、配置 1.更改主机名 vim /etc/hostname 修改为:testsamba vim /etc/hosts 修改行为: 127.0.0.1 testsamba.southbaytech.co testsamba 2.更改系统dns vim /etc/sysconfig/network-scripts/ifcfg-eth0 其中dns修改为: dns1=172.21.100.11 #ip地址为dns的AD域 3.禁用防火墙和Selinux chkconfig firewalld off sed -i 's@SELINUX=enforcing@SELINUX=disabled@' /etc/selinux/config 4.设置开机启动winbind,samba chkconfig winbind on chkconfig smb on 5.创建samba目录 mkdir /home/share chmod 777 /home/share 6.修改krb5配置 vim /etc/krb5.conf 修改为如下配置 [libdefaults] dns_lookup_realm = true default_realm = SOUTHBAYTECH.CO [realms] SOUTHBAYTECH.CO = { kdc = 172.21.100.11:88 admin_server = 172.21.100.11:749 } [domain_realm] .southbaytech.co = SOUTHBAYTECH.CO southbaytech.co = SOUTHBAYTECH.CO 7.修改nss配置 vim /etc/nsswitch.conf 修改为: passwd: files winbind shadow: files winbind group: files winbind 8.修改samba配置 vim /etc/samba/smb.conf 修改为: [global] # ----------------------- Network-Related Options ------------------------- workgroup = SOUTHBAYTECH netbios name = testsamba # ----------------------- Standalone Server Options ------------------------ #security = user #passdb backend = tdbsam # ----------------------- Domain Members Options ------------------------ security = ads realm = SOUTHBAYTECH.CO password server = 172.21.100.11 idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/bash template homedir = /home/%U winbind use default domain = true winbind offline logon = true winbind enum groups = yes winbind enum users = yes winbind separator = / #============================ Share Definitions ============================== [share] comment = Home Directories path = /home/share browseable = yes (是否显示共享文件夹,默认yes) #writable = yes (是否可写,yes表示所有用户默认有写权限,write list无效;反之read list 无效) available = yes force group = nogroup create mask = 0777 directory mask = 0777 read list = asd (读权限) write list = asd (写权限) valid users = asd (有访问此共享文件夹权限的用户,默认表示所有用户都有访问权限) 9.重启服务器 reboot 10.将服务器加入域 kinit tab_ding@SOUTHBAYTECH.CO (测试是否可以加入域) net ads join -U tab_ding@SOUTHBAYTECH.CO(需要管理员权限) 注:如果出现无法加入域的情况,请检查服务器时间和AD域时间是否相差太多或者AD域中已存在该主机 11.重启winbind服务 service winbind restart 其他命令 net ads leave -U administrator (离开域) wbinfo -t (测试RPC调用是否正常) net ads testjoin (测试是否正常加入域) wbinfo -u (域内用户) wbinfo -g (域内组 三、配置日志(centos7) 1.创建日志目录 mkdir -p /home/log/samba 2.配置samba vim /etc/samba/smb.conf 添加如下配置: [global] vfs object = full_audit #设置审计日志格式 full_audit:prefix = %u|%I|%S #审计失败日志 full_audit:failure = connect #审计成功日志 full_audit:success = mkdir rmdir rename unlink kernel_flock #审计日志设备 full_audit:facility = local5 #审计日志安全等级 full_audit:priority = info 3. 配置syslog 其中*.info;mail.none;authpriv.none;cron.none /var/log/messages 为原来存在,新加local5.none vim /etc/rsyslog.conf 修改为: *.info;mail.none;authpriv.none;cron.none;local5.none /var/log/messages local5.info -/home/log/samba/smb.log 4.重启服务 systemctl restart rsyslog systemctl restart smb 四、配置回收站(centos7) 1.创建回收站目录 mkdir /home/share/.delete chmod 777 -R /home/share/.delete 2.配置samba 在共享模块share中添加以下内容: vfs objects = recycle #开启回收站 recycle:repository = /home/share/.delete/%U #回收站路径 recycle:keeptree = yes #保持原路径 recycle:versions = yes #开启版本控制 recycle:minsize = 100 #排除小于100字节的文件回收 recycle:maxsize = 1000000 #排除大于100万字节的文件回收 recycle:exclude_dir = tmp #排除tmp目录回收 recycle:exclude = *.log #排除.log结尾的文件进入回收站 3.重启服务 systemctl restart smb

2023年1月13日 · 2 分钟 · 370 字 · AIHugoBlog

Centos7下yum安装mysql-community各版本

1.下载安装repo # 打开网站 https://dev.mysql.com/downloads/repo/yum/ # 下载 mysql80-community-release-el7-3.noarch.rpm # 安装 rpm -ivh mysql80-community-release-el7-3.noarch.rpm 2.更换yum可用community版本 # 查找当前可用版本 yum repolist enabled | grep "mysql.*-community.*" # 列出可用版本 yum repolist all | grep mysql # 安装yun-config-manager yum -y install yum-utils # 关闭和启用可安装版本 yum-config-manager --disable mysql57-community yum-config-manager --enable mysql56-community 3.安装 yum repolist enabled | grep mysql yum install mysql-community-server 4.启动 service mysqld start systemctl enable mysqld 5.保护MySQL安装 # 执行命令 mysql_secure_installation 6.创建个人账号 mysql -uroot -p GRANT ALL privileges ON *.* TO 'tab'@'%' IDENTIFIED BY '123456' WITH GRANT OPTION; flush privileges; 7.开启防火墙 firewall-cmd --add-port=3306/tcp firewall-cmd --add-port=3306/tcp --permanent 8.默认密码查找 grep 'temporary password' /var/log/mysqld.log

2023年1月13日 · 1 分钟 · 94 字 · AIHugoBlog

jellyfin在qnap中开启核显硬解的方法

1.登录到qnap的ssh界面,并执行一下命令 chmod 777 /dev/dri/rederD128 2.使用一下命令启动docker docker run -d --name jellyfin --restart=always --device /dev/dri/renderD128:/dev/dri/renderD128 --device /dev/dri/card0:/dev/dri/card0 -v /share/TV:/media -p 8096:8096 -v 8920:8920 jellyfin/jellyfin 关键参数:–device /dev/dri/renderD128:/dev/dri/renderD128 3.在jellyfin中开启硬解,如图:

2023年1月13日 · 1 分钟 · 25 字 · AIHugoBlog

jellyfin解决字幕和显示界面中文方框乱码的问题

1.下载自己喜欢的字体如苹果字体和如图中所示字体 2.把字体上传至linux文件系统中 3.在开启jellyfin的docker中,把该字体文件夹映射到jellyfin的docker容器中。如 -v /usr/share/fonts/truetype/mac:/share/Container/jellyfin_fonts 4.在jellyfin网页中开启备用字体,如图

2023年1月13日 · 1 分钟 · 6 字 · AIHugoBlog

MAC电脑HomeBrew国内源安装卸载方法

安装 /bin/bash -c "$(curl -fsSL https://cdn.jsdelivr.net/gh/ineo6/homebrew-install/install.sh)" 卸载 /bin/zsh -c "$(curl -fsSL https://gitee.com/cunkai/HomebrewCN/raw/master/HomebrewUninstall.sh)"

2023年1月13日 · 1 分钟 · 12 字 · AIHugoBlog

开启openmediavault的网络唤醒和定时关机

1.打开OMV主板中BIOS网络唤醒 2.OMV使用静态IP,并开启WOL 3.电源管理-计划任务,实现定时关机

2023年1月13日 · 1 分钟 · 3 字 · AIHugoBlog

Centos7如何正确修改hostname

[root@centos7 ~]$ hostnamectl set-hostname contenthub # 使用这个命令会立即生效且重启也生效 [root@centos7 ~]$ hostname # 查看下 contenthub [root@centos7 ~]$ vim /etc/hosts # 编辑下hosts文件, 给127.0.0.1添加hostname [root@centos7 ~]$ cat /etc/hosts # 检查 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 contenthub ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

2023年1月13日 · 1 分钟 · 37 字 · AIHugoBlog

Centos7下安裝Dokuwiki、Nginx

安裝 Nginx + php-fpm rpm -ivh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm yum install nginx wget php 要升級成 5.6 yum install epel-release rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-7.rpm yum remove php-* 启用 [remi-php56] : [remi-php56] : enabled=1 : 安裝 php 5.6 yum install php php-fpm php-mbstring php-pdo php-gd php-xml php-mcrypt php-mysql 设定nginx 网站名 - wiki.ichiayi.com 网页路径 - /var/www/html vi /etc/nginx/conf.d/default.conf server { server_name wiki.ichiayi.com; listen 80; autoindex off; client_max_body_size 15M; client_body_buffer_size 128k; index index.html index.htm index.php doku.php; access_log /var/log/nginx/wiki.ichiayi.com/access.log; error_log /var/log/nginx/wiki.ichiayi.com/error.log; root /var/www/html; location / { try_files $uri $uri/ @dokuwiki; } location ~ ^/lib.*\.(gif|png|ico|jpg)$ { expires 30d; } location = /robots.txt { access_log off; log_not_found off; } location = /favicon.ico { access_log off; log_not_found off; } location ~ /\. { access_log off; log_not_found off; deny all; } location ~ ~$ { access_log off; log_not_found off; deny all; } location @dokuwiki { rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last; rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last; rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last; rewrite ^/(.*) /doku.php?id=$1 last; } location ~ \.php$ { try_files $uri =404; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include /etc/nginx/fastcgi_params; fastcgi_param QUERY_STRING $query_string; fastcgi_param REQUEST_METHOD $request_method; fastcgi_param CONTENT_TYPE $content_type; fastcgi_param CONTENT_LENGTH $content_length; fastcgi_intercept_errors on; fastcgi_ignore_client_abort off; fastcgi_connect_timeout 60; fastcgi_send_timeout 180; fastcgi_read_timeout 180; fastcgi_buffer_size 128k; fastcgi_buffers 4 256k; fastcgi_busy_buffers_size 256k; fastcgi_temp_file_write_size 256k; } location ~ /(data|conf|bin|inc)/ { deny all; } location ~ /\.ht { deny all; } } php-fpm 配置 - /etc/php-fpm.d/www.conf 安裝 Dokuwiki mkdir -p /var/www cd /var/www wget https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz tar -zxvf dokuwiki-stable.tgz mv dokuwiki-stable.tgz wiki-stable.tgz mv dokuwiki-* html 建立目录和权限设置 mkdir -p /var/log/nginx/wiki.ichiayi.com chown -R apache:apache /var/www/html/data chown -R apache:apache /var/www/html/conf 更改 /etc/php.ini 设定 vi /etc/php.ini : upload_max_filesize = 10M : post_max_size = 10M : : [Date] date.timezone = Asia/Taipei : 启动nginx + php-fpm systemctl enable nginx systemctl enable php-fpm systemctl start php-fpm systemctl start nginx

2023年1月13日 · 2 分钟 · 282 字 · AIHugoBlog

CentOS7下挂载NTFS、Exfat

支持 Exfat wget http://li.nux.ro/download/nux/dextop/el7/x86_64/fuse-exfat-1.0.1-1.el7.nux.x86_64.rpm wget http://li.nux.ro/download/nux/dextop/el7/x86_64/exfat-utils-1.0.1-1.el7.nux.x86_64.rpm rpm -ivh fuse-exfat-1.0.1-1.el7.nux.x86_64.rpm rpm -ivh exfat-utils-1.0.1-1.el7.nux.x86_64.rpm 支持 NTFS yum install epel-release -y yum install ntfs-3g -y

2023年1月13日 · 1 分钟 · 22 字 · AIHugoBlog

Centos7下aspera-p2p服务器搭建

1.更新系统及安装软件 yum install epel-release -y yum update -y 2.上传文件安装文件至服务器 将aspera安装包aspera-scp-p2p-3.7.4.147133-linux-64.rpm和license aspera-license,上传至服务器 3.安装p2p rpm -ivh aspera-scp-p2p-3.7.4.147133-linux-64.rpm 4.导入license cp aspera-license /opt/aspera/etc/aspera-license 5.验证ascp ascp -A 6.修改ssh端口 vim /etc/ssh/sshd_config #修改port为33001 7.重启服务 service asperacentral restart service asperanoded restart service sshd restart 8.关闭selinux setenforce 0 sed -i 's@SELINUX=enforcing@SELINUX=disabled@' /etc/selinux/config 9.开防火墙端口 firewall-cmd --add-port 33001/tcp firewall-cmd --add-port 33001/udp firewall-cmd --add-port 33001/tcp --permanent firewall-cmd --add-port 33001/udp --permanent 10.创建用户 #创建用户目录 mkdir -p /data/aspera/test #创建用户 useradd -d /data/aspera/test/ -s /bin/aspshell -M test #设置用户密码 passwd test #设置用户目录权限 chown -R test:test /data/aspera/test #配置aspera文件 asconfigurator -x "set_user_data;user_name,test;absolute,/data/aspera/test;read_allowed,true;dir_allowed,ture;write_allowed,ture" 11.设置aspera-p2p帐号创建文件夹的权限为777 asconfigurator -x "set_user_data;user_name,test;file_create_mode,666;directory_create_mode,777" 12.通过命令行测试传输 export ASPERA_SCP_PASS=123456 #载入远程p2p服务器帐号的密码 ascp -T -l 500m -P 33001 -O 33001 -d --mode=send --user=test --host=192.168.1.100 abc/ / #通过test帐号以500Mbps的带宽把abc文件夹传送至192.168.1.100的p2p服务器的p2p用户根目录下

2023年1月13日 · 1 分钟 · 106 字 · AIHugoBlog