Skip to content

Latest commit

 

History

History
275 lines (239 loc) · 8.99 KB

fileshare.md

File metadata and controls

275 lines (239 loc) · 8.99 KB
Raw

Server Config

NFS

*nix to *nix fileshare protocol nfs-share setup, Performed on Fedora 29 server & client

Fedora:

Install

dnf -y install nfs-utils rpcbind

start (& enable) the service

systemctl start rpcbind
systemctl enable rpcbind

show available mounts from server (must specify server)

showmount -e 192.168.0.13

start (& enable) the service(s)

systemctl start nfs-server rpcbind rpc-statd nfs-idmapd
systemctl enable nfs-server rpcbind

openSUSE

Install (MicroOS,Aeon)

transactional-update pkg in -t pattern file_server

Install (Tumbleweed,Leap)

zypper in -t pattern file_server

The NFS server is not part of the default installation
(Suse docs:22.2)

The configuration files for the NFS export services:
/etc/exports
/etc/sysconfig/nfs
(SUSE docs:22.3.2)

start/enable associated services

systemctl restart nfsserver
systemctl enable nfsserver

Distro-agnostic

/etc/idmapd.conf
uncomment & enter domain-name <- same name as used in server idmapd.conf

Domain = sameDomainNameHere

Configure what is exported, access permissions, and with-whom to share
/etc/exports

/storage/share 192.168.1.0/24(rw,sync,subtree_check)
#NOTE: all users must have uid & gid defined the same on all machines, or strange things happen with the share (like question-marks instead of permissions displayed)

...or options per kodi.wiki.nfs 

/storage/share 192.168.9.0/24(rw,sync,all_squash,anonuid=1001,anongid=1306,subtree_check)

Configure firewall to allow client servers to access NFS shares

firewall-cmd --permanent --add-service nfs
firewall-cmd --permanent --add-service mountd
firewall-cmd --permanent --add-service rpc-bind
firewall-cmd --reload

Verify shares export as expected

exportfs -rav

Info: http://www.troubleshooters.com/linux/nfs.htm

Samba

Windows to *nix fileshare protocol

Fedora

dnf install samba samba-client samba-common

openSUSE
[ samba guide ]
[ https://doc.opensuse.org/documentation/leap/reference/html/book.opensuse.reference/cha.samba.html ]

Configure
(backup original conf file)
/etc/samba/smb.conf

netbios name = dubserv
hosts allow = 127.0.0.1 192.168.9.0/24
workgroup = WORKGROUP
add/configure share entry(ies)
[dubstuff]
    comment = media 640 as ext4
    path = /storage/dubstuff
    valid users = @royalty
    create mask = 0775
    create mode = 0775
    browsable = yes
    writable = yes
    read only = no

[media]
    comment = media 3tb as ntfs
    path = /storage/share
    valid users = @smbgrp,@guests,@royalty
    browsable = yes
    writable = yes
    read only = no

Configure firewall to allow samba service

firewall-cmd --permanent --add-service=samba
firewall-cmd --permanent --add-service=samba-client
firewall-cmd --reload

SEManage the shared directory

dnf install policycoreutils-python-utils
semanage fcontext -a -t samba_share_t '/path/to/goods(/.*)?'
restorecon -Rv /path/to/goods

If shared volume is NTFS partition: edit NTFS fstab entry

context=system_u:object_r:samba_share_t:s0

Samba Users, groups, & permissions

User:

groupadd samba #Create a new group  
usermod -a -G samba cyril #add secondary group to existing user  
useradd cyril -G samba #Create a new user & add to smbgrp  
smbpasswd -a cyril #Create a Samba password for the user  
smbpasswd -e cyril #Enable Samba user

Filesystem:

chmod -R 0770 /path/to/goods #Change the permissions of the folder  
chown -R root:samba /path/to/goods #Change the ownership of the folder

Test the newly saved entry & restart samba services

testparm
systemctl restart smb nmb

Works? then enable both smb & nmb services

systemctl enable smb nmb

nmb service is avc denied when selinux is enforcing ?

ausearch -c 'nmbd' --raw | audit2allow -M my-nmbd
semodule -i my-nmbd.pp
systemctl restart nmb

<=========>

Client Config

Software

  • Fedora

Install

dnf -y install nfs-utils rpcbind

start (& enable) the service

systemctl start rpcbind
systemctl enable rpcbind

  • openSUSE

Install

To configure your host as an NFS client, you do not need to install additional software. All needed packages are installed by default.
(SUSE docs:22.4)

verify that nfs.service is active & enabled

The prerequisite for importing file systems manually from an NFS server is a running RPC port mapper. The nfs service takes care to start it properly
(SUSE docs:22.4.2)

  • Distro-agnostic

/etc/idmapd.conf
uncomment & enter domain-name <- same name as used in server idmapd.conf

Domain = sameDomainNameHere

show available mounts from server (must specify server)

showmount -e 192.168.0.13

Method: fstab

Connecting via entry appended to /etc/fstab

  • NFS

(ip OR alias)
dubserv:/storage/share /storage/share                       nfs     defaults        0 0
dubserv:/storage/share  /home/storage/mediaShare     nfs    noauto,x-systemd.automount,x-systemd.device-timeout=10,timeo=14,hard,intr,noatime	0 0
  • noauto: don't mount automatically at boot
  • x-systemd.automount: create an automount entry to mount this upon access
  • x-systemd.device-timeout: length of time to attempt connecting to the device
  • timeo: Length of time in-between attempts to connect
  • hard: If the NFS server is unresponsive, requests will be retried indefinitely
  • intr: Interruptible: When the server comes back online, the process can be continued from where it was while the server became unresponsive
  • noatime: Do not record the access times (unecessary action that slows things down)

https://linoxide.com/file-system/example-linux-nfs-mount-entry-in-fstab-etcfstab/
-Arch wiki: Mount using /etc/fstab with systemd
see fstab archive for more examples

  • SAMBA

//w.x.y.z/Home$ /mnt/dir cifs credentials=/root/cifs.creds,sec=ntlmssp,file_mode=0700,dir_mode=0700`

/root/cifs.creds | owned by: root:root | permissions: 0400

domain=A
username=B
password=C

A, B and C above must be literal - there's no shell-like parsing of quotes or backslashes.

other mounting info:

Add mount entry to /etc/fstab.
For avoiding mounting SMB before network initialization, you need to add _netdev option.
For making x-systemd.automount to mount SMB, you need to add x-systemd.automount to option.

more _netdev stuff
See [fstab archive] for more examples

Client: Windows:

  • forcing windows to update samba login credentials
  • Close all apps/windows using any shares
  • [ super-key ] > “credentials” > edit or remove credentials as needed
  • nuke all shares (covers 192.168.1.13, 192.168.1.9, Dubserv, dubserv) net use * /delete
  • OR view connections on a specific server, then delete specific share
    net view \\SERVERNAME
    net use \\SERVERNAME /delete
  • establish desired share credentials net use \\SERVERNAME\SHARENAME /u:USERNAME
  • log-off and back on (restarts services & dependencies)

another method
thorough method
Map drive letter to samba share
Map a drive letter via CLI

**https://www.itzgeek.com/how-tos/linux/centos-how-tos/how-to-setup-nfs-server-on-centos-7-rhel-7-fedora-22.html https://www.server-world.info/en/note?os=Fedora_28&p=nfs&f=1 https://www.server-world.info/en/note?os=Fedora_28&p=nfs&f=2 https://linuxconfig.org/how-to-configure-a-nfs-file-server-on-ubuntu-18-04-bionic-beaver#h7-2-configure-your-exports https://www.tecmint.com/how-to-setup-nfs-server-in-linux/ https://blackcatsoftware.us/fedora-27-configure-nfs-server-and-client/

domain name info: https://www.lifewire.com/everything-you-need-to-know-about-the-domainname-command-4066531