download

[ 245 ]Chapter 14The default configuration file for samba is located at /usr/local/etc/smb.conf.The default configuration file contains the basic configuration including a fewsample shared directories and printers. You should modify this file (or create a newone from the scratch) to suit your specific needs.You need to set up your server name, workgroup name, security-level, andaccess control rules in your smb.conf file, before actually setting up your shareddirectories/printers:[global]workgroup = MYGROUPserver string = Samba Serversecurity = userhosts allow = 192.168.1. 192.168.2. 127.This will set your workgroup name, server name (as it will be seen by other SMBhosts), security-level (which can be chosen from various options such as user, share,server, ads, and domain) as well as the hosts that are allowed to access this server.There are also further advanced options that can be specified in thisconfiguration file, such as debugging and logging options, Master Browserpreference, centralized password server settings, and wins/dns proxysettings. The default configuration file is crafted in a way that it fits in mostof the simple deployments. However, all these configuration parametersalong with a short description and their default value are present in thesample configuration file, which can be modified to suit your need.After tweaking general configuration parameters, you should specify your sharedresources configuration. Each share has its own configuration block, like thefollowing example:[myshare]comment = sample shared directorypath = /usr/home/babak/mydocsvalid users = babak jdoepublic = nowriteable = yesprintable = noThis example shows a simple shared directory. The share can be accessed on thenumber using its name (in this example, myshare). We have also specified the actualaddress of the directories we are going to share over the network. This share wouldnot be available for everyone and users should be authenticated, hence the validusers parameter. Only the users, babak and jdoe, are authorized to access thisshare. The share is also writable so that users can create and modify the shared filesacross the network. And as the last parameter, we have also specified that this shareis not a printer (which explains the printable parameter).