Translations by EAdam

ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)

Introduction

One of the most common ways to network Ubuntu and Windows computers is to configure Samba as a File Server. This section covers setting up a <application>Samba</application> server to share files with Windows clients.

The first step is to install the <application>samba</application> package. From a terminal prompt enter:

sudo apt-get install samba

<emphasis>read only:</emphasis> determines if the share is read only or if write privileges are granted. Write privileges are allowed only when the value is <emphasis>no</emphasis>, as is seen in this example. If the value is <emphasis>yes</emphasis>, then access to the share is read only.

Now that <application>Samba</application> is configured, the directory needs to be created and the permissions changed. From a terminal enter:

sudo mkdir -p /srv/samba/share

sudo chown nobody.nogroup /srv/samba/share/

Finally, restart the <application>samba</application> services to enable the new configuration:

Once again, the above configuration gives all access to any client on the local network. For a more secure configuration see <xref linkend="samba-fileprint-security"/>.

From a Windows client you should now be able to browse to the Ubuntu file server and see the shared directory. To check that everything is working try creating a directory from Windows.

For in depth Samba configurations see the <ulink url="http://samba.org/samba/docs/man/Samba-HOWTO-Collection/">Samba HOWTO Collection</ulink>

The guide is also available in <ulink url="http://www.amazon.com/exec/obidos/tg/detail/-/0131882228">printed format</ulink>.

Samba Print Server

For a more secure configuration see <xref linkend="samba-fileprint-security"/>.

Before installing and configuring Samba it is best to already have a working <application>CUPS</application> installation. See <xref linkend="cups"/> for details.

To install the <application>samba</application> package, from a terminal enter:

The default Samba configuration will automatically share any printers installed. Simply install the printer locally on your Windows clients.

Also, see the <ulink url="http://www.cups.org/">CUPS Website</ulink> for more information on configuring CUPS.

Securing a Samba File and Print Server

Samba Security Modes

The security mode you choose will depend on your environment and what you need the Samba server to accomplish.

Security = User

sudo apt-get install libpam-smbpass

Edit <filename>/etc/samba/smb.conf</filename>, and in the <emphasis>[share]</emphasis> section change:

guest ok = no

Finally, restart Samba for the new settings to take effect:

Now when connecting to the shared directories or printers you should be prompted for a username and password.

Share Security

admin users = melissa

After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for the changes to take effect:

You should now be able to read, write, and execute files in the shared directory as normal, and the <application>smbd</application> binary will have access to only the configured files and directories. Be sure to add entries for each directory you configure Samba to share. Also, any errors will be logged to <filename>/var/log/syslog</filename>.

domain logons = yes logon path = \\%N\%U\profile logon drive = H: logon home = \\%N\%U logon script = logon.cmd add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d /var/lib/samba -s /bin/false %u

This will copy the <filename>/etc/hosts</filename> to <filename>//fs01.example.com/share/hosts</filename>.

After joining the domain, it is necessary to reboot before attempting to authenticate against the domain.

&lt;?php phpinfo(); ?&gt;

VPN

A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted network connection between two or more networks. There are several ways to create a VPN using software as well as dedicated hardware appliances. This chapter will cover installing and configuring <application>OpenVPN</application> to create a VPN between two servers.

OpenVPN

OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between nodes. A simple way of setting up a VPN with OpenVPN is to connect the clients through a bridge interface on the VPN server. This guide will assume that one VPN node, the server in this case, has a bridge interface configured. For more information on setting up a bridge see <xref linkend="bridging"/>.

To install <application>openvpn</application> in a terminal enter:

sudo apt-get install openvpn

Server Certificates

Now that the <application>openvpn</application> package is installed, the certificates for the VPN server need to be created.

sudo mkdir /etc/openvpn/easy-rsa/

Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the following to your environment:

export KEY_COUNTRY="US" export KEY_PROVINCE="NC" export KEY_CITY="Winston-Salem" export KEY_ORG="Example Company" export KEY_EMAIL="steve@example.com"

Enter the following to create the server certificates:

cd /etc/openvpn/easy-rsa/