Serveren arbejder som Home server uden DC (domain Controller) så alle har nem adgang til foldere og drev.
Aktivere root bruger passwd for at lette installationen:
sudo passwd root
su
Editere /etc/network/interfaces og sæt en fast IP:
gksudo gedit /etc/network/interfaces
Tilføj:
auto lo
iface lo inet loopback
# This is a list of hotpluggable network interfaces.
# They will be activated automatically by the hotplug subsystem.
mapping hotplug
script grep
map eth0
# The primary network interface
auto eth0
iface eth0 inet static
address 192.168.1.10
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.1
Genstart netværket:
/etc/init.d/networking restart
Editere /etc/hosts and tilføj den nye IP:
gksudo gedit /etc/hosts
Tilføj:
127.0.0.1 localhost.localdomain localhost
192.168.1.10 server1.example.com server1
Sæt Hostname
echo server1 > /etc/hostname
/bin/hostname -F /etc/hostname
Sæt Resolve
nano /etc/resolv.conf
Indsæt:
search peterlund.org
domain peterlund.org
nameserver 192.168.1.1
nameserver 212.242.40.3
nameserver 212.242.40.51
Editere /etc/apt/sources.list og opdatere installationen:
gksudo gedit /etc/apt/sources.list
Tilføje:
deb http://de.archive.ubuntu.com/ubuntu/ feisty main restricteddeb-src http://de.archive.ubuntu.com/ubuntu/ feisty main restricted deb
http://de.archive.ubuntu.com/ubuntu/ feisty-updates main restricteddeb-src http://de.archive.ubuntu.com/ubuntu/ feisty-updates main restricted deb
http://de.archive.ubuntu.com/ubuntu/ feisty universedeb-src http://de.archive.ubuntu.com/ubuntu/ feisty universe deb
http://de.archive.ubuntu.com/ubuntu/ feisty multiversedeb-src http://de.archive.ubuntu.com/ubuntu/ feisty multiverse
http://de.archive.ubuntu.com/ubuntu/ feisty-backports main restricted universe multiverse
deb-src http://de.archive.ubuntu.com/ubuntu/ feisty-backports main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu feisty-security main restricteddeb-src http://security.ubuntu.com/ubuntu feisty-security main restricteddeb
http://security.ubuntu.com/ubuntu feisty-security universedeb-src http://security.ubuntu.com/ubuntu feisty-security universedeb
http://security.ubuntu.com/ubuntu feisty-security multiverse
deb-src http://security.ubuntu.com/ubuntu feisty-security multiverse
Kør:
apt-get update
apt-get upgrade
Install SSH Daemon:
apt-get install ssh openssh-server
Log ind med Putty på 192.168.1.10 og forsæt resten af installationen herfra.
Sætte quota:
apt-get install quota
Edit /etc/fstab så det ser ud som herunder (Jeg tilføjede, usrquota, grpquota til de partitioner som har mount mount point)
gksudo gedit /etc/fstab
Indsæt:
# /etc/fstab: static file system information.
#
#
proc /proc proc defaults 0 0
# /dev/sda1
UUID=226d9304-88ca-44c0-a3e3-d1ad26cfc084 / ext3 defaults,errors=remount-
ro,usrquota,grpquota 0 1
# /dev/sda5
UUID=d824ce36-04b8-4870-83f4-f1a5037c2de4 none swap sw 0 0
/dev/hdc /media/cdrom0 udf,iso9660 user,noauto 0 0
Kør:
touch /quota.user /quota.group
chmod 600 /quota.*
mount -o remount /
quotacheck -avugm
quotaon –avug
Man ser på et tidspunkt en fejl som der her når man kører quotacheck -avugm første gang:
quotacheck: WARNING - Quotafile //quota.user was probably truncated. Cannot save quota
settings...
quotacheck: WARNING - Quotafile //quota.group was probably truncated. Cannot save quota
settings...
Det er normalt, så bare gå videre:
Installere Samba og Swat
apt-get install samba swat samba-common samba-doc libcupsys2-gnutls10 libkrb53 winbind smbclient netkit-inetd
Konfigurere Swat
For at konfigurer systemet for at køre Swat er der two filer der skal ændres:
/etc/services
/etc/inetd.conf
I /etc/services skal tilføjes:
swat 901/tcp
Kør komandoen:
which swat
Hvis svaret er:
/usr/sbin/swat
..så retter man /etc/inetd.conf så stien ser således ud:
#Samba Web Administration Tool: |
Før man kan logge ind i Swat skal man tilføje root brugeren til samba password databasen.
I terminalen:
smbpasswd -a root
Username: root
Password: "Et_eller_andet_password"
Hvis paswordet allerede er genereretr køres istedet:
smbpasswd -e root
..for at enable brugeren.
Start Swat op
For at start Swat op tænder man sin favorit browser op at lader den pege på:http://localhost:901/Konfigurere Samba med SwatUnder punktet kaldet "Global" tilføjes:
workgroup
Server1
lo, eth0
workgroup
server1
lo, eth0
host allow = 192.168.1.10, 127.0.0.1
Samba konfiguration
gksudo gedit /etc/samba/smb.conf
Creating the global section
| [global] netbios name = server1 server string = Samba Server workgroup = workgroup security = user encrypt passwords = yes smb passwd file = /var/lib/samba/private/smbpasswd log file = /var/log/samba/%m.log socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = yes hostname lookups = yes hosts equiv = /etc/hosts hosts allow = 192.168. localhost hosts deny = All interfaces = lo eth0 bind interfaces only = yes guest ok = yes browse list = yes printcap name = cups printing = cups load printers = yes |
netbios name: This field should be filled in with the name of your server, this is what your windows computer will refer to the server as.
server string: This field is not really required, but it is handy incase you don't remember what you called your computer e.g. like me :P
workgroup: This field tells the server which Workgroup it belongs to. This field is absolutely essential.
security: This field refers to the level of security which should be present. There are two levels of security which I feel is within the scope of this howto to explain:
1. Share level security: Anyone can access any share without entering a username and password, i.e. no security.
2. User level security. If someone wants to access a share on the server, they need to enter a valid username and password.
A valid username is any user who has an account on your server.
To add a user, use the useradd command. A valid user needs a valid password, but to be able to use the share, they need a valid samba password. To add a samba password for a user, just execute this command:
# smbpasswd -a user_name
Personally I recommend you use user level security. However, if you feel the need to use share level security, by all means do so, but for making sure everything works, set it to user level security. This is because the command which tests whether the Smaba server works requires user level security to work. Once the server is up and running, you can set it back to share level security.
encrypt passwords: Sounds pretty obvious doesn't it, I don't want other people knowing my passwords easily, so they should be encrypted.
smb passwd file: The file where the samba passwords should be stored. You can use a whereis or a find to find the proper location of your smbpasswd file.
log file: The file where the server should create the logs for each machine the %m you see there will actually be replaced with the name of the machine.
socket options: These are supposed to improve the sending and recieving of data.
wins support: One of my W2K box refuses to see the Samba server without this option enabled. This option just causes the Samba server to act as a WINS server. Because this option is enabled, you should set the WINS server option in your Windows clients to the IP address of the Samba server.
hostname lookups: This field just asks whether the server should perform lookups based on the hostname of the client computers. If you set this field, you beed a hosts equiv field to tell the server the equivalent ip's of the other computers.
hosts equiv: This field just tells the server the loacation of the file which translates a IP address to a hostname.
hosts allow / hosts deny: These fields set which hosts can access the server based on their IP address or hostnames. In the example hosts allow field, I have told it to allow any computer with an IP address in the range 192.168.0.1 to 192.168.0.255 on the subnet 255.255.255.0 to have access to the server, localhost should also be included so that we can test to see wether the server works.
The hosts deny entry is set to All as I don't want anyone else accessing the shares.
interfaces: This field is only required if you have multiple network cards/connections. (Yes the Internet is a type of connection). This field should be set with the names of the interface/s that the Samba server should listen to for requests. Valid interface names on your system can be found by using the /sbin/ifconfig command.
bind interfaces only: This field tells the server only to listen to the interfaces listed in the "interfaces" field.
guest ok: allow guests to see the server, and some limited browsing. Usually should be set to no.
printcap name / printing: The type of printing system we are going to use.
load printers: Well we do want the system to load the printers automatically so that clients can use it, don't we?
Ch 1.2 Setting up shares // Server's IP address Hostname
Shares on the server are what other people can see and access.
1.2.1 Setting up file shares:
A basic file share should have the name of the share and any other relevant details, below is an example of a public file share which everybody can access.
[public] <------- This is the name of the share path = /home/samba/public comment = Shared folders guest ok = yes create mode = 0766 browseable = yes public = yes read only = no this share allows everybody to access the shared folder on the server under /home/samba/server. To create such a share with relevant permissions, execute these commands:
# chmod -R 777 /home/samba/public
Now some people may want to access their own files from any computer connected to the network and prevent others from accessing it. In such a case, create a share like the following:
[home_directories]
comment = User's home directory
path = /home/%U
read only = no
valid users = %U root <--- We only want the legimitate user and root to be able to access the share Note for sharing home directories with password protections, you obviously have to set the security level to user in the global section. File shares can be set to things like removeable media such as cd/dvd drives and usb drives, all you have to do is tell the server the correct path to the resource e.g. /mnt/usb 1.2.2 Setting up Print shares We are now going to setup the Print share [printers]
comment = All Printers
browseable = no
printable = yes
writable = no
public = yes
guest ok = yes
path = /var/spool/samba
printer admin = root
This section is like a "global" setting for printer, we are allowing guests to be able to print from it and only allow root to administer it.
The next section just defines which printer to share, if you have multiple printers connected to your computer, just create more of the printer shares outlined below:[HP5160] <--- The name I will be referring to my printer from now on comment = HP Deskjet 5160 printable = yes path = /var/spool/samba public = yes guest ok = yes printer admin = root
Once all that is done, save the file and perhaps create a backup of it. Now we will test the server.
Ch 1.3 Testing the Samba Server
There is a command called testparm which will parse the smb.conf file and see if you have made any errors. To run it, just do:
// if /usr isn't in your path, you may have to run the following command:
# /usr/bin/testparm
# ps -e grep nmbd
It will prompt you for the present user's samba password.
If the present user doesn't have a valid samba password, simply execute this command:
Note, the execution of the smbclient command results in the most errors, most noteably a NT_STATUS_LOGON FAILURE error. A few things you can do to fix this:
1. Check that the smb.conf file has you in the correct workgroup
2. Check your samba passwords and which password file it uses.
Also, if you make any changes to the smb.conf file, you need to restart the samba service by executing this command:
// alternatively, you can do this
# /etc/init.d/samba stop
# /etc/init.d/samba start
Ch 1.4 Client Configuration
For all Windows clients you need to do the following:
1. Set the workgroup to the correct workgroup set in the smb.conf file
2. Under the Advanced TCP/IP settings for the adapter, there will be an entry for WINS server, set this to the IP address of the Samba server.
3. If you have a firewall e.g. Norton or Zone Alarm running, tell it to allow communication from the Samba server, normally, you just tell it the IP address of the server and set it to "Allow".
4. Sometimes you may need a restart for things to work :P
Linux clients:
To access Windows shares or SMB shares on the Samba server, you need to execute following command as root:
Alternatively you can write up the entry in your /etc/fstab file like so://Server_name/Share /mount_point smbfs username=YOUR_USERNAME,password=YOUR_SHARE_PASSWOR D,rw,users,umask=000 0 0
Since you have mounted windows shares in linux through Samba, you can now write to those partitions even NTFS based ones.
Note: for the above commands to work, you need the correct entries in the /etc/hosts file as shown below:
192.168.0.1 My_Samba_Server
CUPS is the Common Unix Printing System, we shall use this on our server to share the printer with clients. Note, here I am assuming that the printer will be connected to the Samba Server by means of either a USB or Parallel cable and not through the network.
Ch 2.1 Editing cupsd.conf
Now, like samba, cups has a configuration file, namely cupsd.conf. We shall edit the defalt cupsd.conf file as it would be difficult to start with a clean file, also there is plenty of documentation in the cupsd.conf file and if you feel brave enough, by all means enable some settings and whatnot. Below, I will show you how to edit the cupsd.conf file to get the basics running.
Firstly open the cupsd.conf file with your favourite editor:
the cupsd.conf file is fairly large, I'd suggest you edit the sections below first to get the server working, then play around with it.ServerName Name_of_Print_Server
ServerAdmin root@Name_of_Print_Server
.
.
MaxCopies 10 // I don't want someone accidentally wasting paper and ink on a job
.
.
MaxClients 5 // Set this to whatever you like I don't want more than 5 connections to my server
.
.
BrowseAddress @IF(eth0) // change eth0 to your lan connection, just tells where to send printing updates to
.
BrowseAllow @IF(eth0) // only allow printing from LAN.
BrowseDeny All // I don't want people on internet to try print using my printer 
BrowseOrder deny,allow // We first stop everyone from printing, then allow only local printing.
.
.
Order Deny,Allow
Deny From All
Allow From 127.0.0.1 192.168.0.* // Change 192.168.0.* to address of internal network
.
.
AuthType Basic
AuthClass System
Order Deny,Allow
Deny From All
Allow From 127.0.0.1 // Only the users sitting at the print server can perform admin
Now, I know that at some point people are going to print MS Office Documents, if the following lines aren't uncommented, then you are going to get some screwed up prints. Trust me, I learned the hard way...
In /etc/cups/mime.convs file, uncomment the following line, it is towards the end.# application/octet-stream application/vnd.cups-raw 0
Similarly, uncomment the following line in /etc/cups/mime.types:# application/octet-stream
Now, before proceeding further, we need to start cups with:
Ch 2.1 Installing the Drivers
Installing the Linux drivers:
Firstly, goto the linuxprinting.org site and get the correct CUPS driver for your printer. (link). Download the ppd file and place it in /usr/share/cups/model.
There are 2 ways of installing the Linux driver, firstly using the command line, as root do the following:
The field usb:/dev/usb/ltp0 is what the system refers to as the location of your printer, note this filed will vary across different systems. On some systems, when using usb printers, it could be at /dev/ultp0. If you have a parallel printer, replace usb with parallel:/dev/lpt0 or similar.
The field Some_printer_name.ppd is the name of the printer driver you have downloaded. For example, the HP Deskjet 5160 printer has a ppd file with the name HP-DeskJet_5160-hpijs.ppd.
If that method doesn't work, you can use the CUPS web interface to setup the printer. Simply launch your favourite web browser and point it to http://name_of_print_server:631/ or http://localhost:631/ . Simply point it to the location of the printer, setup its share name and tell it the correct driver to use. Note, you would need to login to this admin webpage with username as root and with your root password. Note this is your root system password and not the samba password.
Installing Windows Drivers:
You can install the drivers in one of two ways. You can either have the driver files installed on to the CUPS server, then when you add a printer on the client, it will go to that directory and fetch the drivers. Or you can install the driver as normal on each client and point it to the shared printer on the CUPS server (Note, with this method, I couldn't get it to work using HP's own drivers and had to use Adobe's drivers).
Firstly, I will explain how to set it up so that the drivers reside on the server.
At the time of writing of this howto, the CUPS Windows drivers are still under developement and hence won't be used here. Instead you have two options, either to use the Windows or Adobe Postscript drivers. Note If you have Windows clients which are pre Win 2K, you will need to use the Adobe Drivers.
Using Windows Postscript drivers
1. Make a directory in /usr/local/share/cups called "drivers"
2. Now on your windows machine, Navigate to the C:\Windows\System32\Spool\Drivers\W32X86\3 folder. Copy whatever files in this folder to a flash drive, or if your samba server is working, copy it to a share on the server.
3. Now copy whatever files which are in this directory to /usr/local/share/cups/drivers
Using Adobe Postscript drivers
1. Make a directory in /usr/share/cups called "drivers"
2. Grab yourself a copy of the Adobe postscript drivers for your language from here. Also, get a ppd file for your printer.
3. Launch the adobe Installer and tell it to use the ppd for your printer, now the drivers will be extracted to C:\Windows\System32\Spool\Drivers folder. Copy these files to usb or a samba share on your server.
4. Copy the extracted driver files from a usb drive or samba server to /usr/local/share/cups/drivers.
Now, because we are setting it up so that the server will contain the drivers, we need add some things to the smb.conf file regarding the location of the drivers. Note the configuration below must be used for all printers[print$]
comment = Printer Drivers
path = /etc/samba/printer # this path holds the driver structure after cupsaddsmb command
guest ok = yes
browseable = yes
read only = yes
write list = root
Now, to add the drivers to samba to be shared to all clients, we execute this command:
The 2nd method of installing the drivers would i.e so that drivers are on client systems is like so:
Using the printer driver which came with your printer, tell it to install as a network printer and point it to the printer which resides on the Samba server. Note, for some reason this method didn't work for me and I had to use the Adobe method outlined below:
Grab yourself a copy of the Adobe postscript drivers for your language from here. Also, get a ppd file for your printer. Run the Adobe installer, point it to the location of the printer on the samba server. Now Under printing in the Control Panel, tell it to use this as default printer.
Ch 2.2 Client Configuration for CUPS
Windows Client configuration:
If you set it up so that driver files reside on the server, in explorer, simply navigate to the shared printer, right click on it and say "Connect", the drivers will be downloaded and you can start using it.
Otherwise simply go to the Add printer wizard in Control Panel and point it to the location of the Printer on the server. You may also want to set it as your default printer.
Linux Client Configuration (Other than the server):
Install a CUPS client on your system, usually by installing the CUPS server package, a CUPS client will also be installed. Now edit the /etc/cups/client.conf file and add the following:ServerName Name_of_Print_Server
And that is all there is to it. Now you should have a working file and print server.
If you want a more detailed version of the printing howto in Samba, see Kurt Pfeifle's "Printing Support in Samba 3.0 manual"
If you want more examples for setting up different configurations of a samba server, be sure to check out the official Samba by Example guide
Installing CUPS
apt-get install cupsys cupsys-client cupsys-driver-gimpprint defoma fontconfig foomatic-db foomatic-filters libcupsimage2 libexpat1 libfontconfig1 libfreetype6 libjpeg62 libpaper1 libpng12-0 libslp1 libtiff4 patch perl perl-modules ttf-bitstream-vera ucf
To get access to the web interface from my workstation (IP 192.168.0.70), I will change cups to listen on the server IP and allow access from the IP 192.168.0.70. You will have to change this IP to suit into your network configuration.
Referencer
http://www.extremetech.com/article2/0,1697,1047877,00.asp
Ingen kommentarer:
Send en kommentar