Solaris Home Server: SMB setup

What is needed is obviously a simple windows filesharing setup – but opensolaris doesn’t come with this out of the box so it needs to be installed then configured.

It should be noted there are two ways to add windows (CIFS aka SMB) file sharing…one is to add the solaris port of SAMBA – the other way which promises to be more lightweight if a bit less feature rich is SUN’s in kernel CIFS server package.  It’s important to note that both are not available together!

Install CIFS server components;

In openSolaris 2009.06 there are two packages needed I installed then from the command line…
host:#pfexec pkg install SUNWsmbskr SUNWsmbs

then reboot

host:#pfexec reboot

(You can also install them using the package manager GUI).

Make the SMB service start automatically at boot

host:#pfexec svcadm enable -r smb/server
svcadm: svc:/milestone/network depends on svc:/network/physical, which has multiple instances.

(apparently the error message doesn't matter!)

Setup the PAM authentication needed

To give SMB access to OpenSolaris users, edit the /etc/pam.conf file to contain the following line:

other password required pam_smb_passwd.so.1 nowarn

Then the password must be re-created for each user that want’s access to the smb service.

host:#passwd john

Join the appropriate workgroup

host:#pfexec smbadm join -w OTB
OTB is the household smb workgroup

Say these magic words…

Apparently this will prevent problems later in defining access permissions and using java web console tools.
host:#pfexec zfs set aclinherit=passthrough rpool

Create the ZFS shares

Create a zfs filesystem within the rpool mirror for sharing pictures…..
host:#pfexec zfs create -o casesensitivity=mixed -o nbmand=on -o sharesmb=name=pictures rpool/pictures
and one for the kids videos..
host:#pfexec zfs create -o casesensitivity=mixed -o nbmand=on -o sharesmb=name=kids_videos rpool/kids_videos

Check the staus of smb shares with…
host:# sharemgr show -vp
default nfs=()
zfs
zfs/rpool/pictures smb=()
pictures=/rpool/pictures

Set File Permissions

At the end of this I ended up with a /rpool/pictures/ directory and a pictures share which can be read but with only the root user has permission to write to. To control access to the directory/share I’ve setup two levels of access.

First I took over ownership of the shares (in this case pictures).
host:#pfexec chown john pictures

I want two layers of access read only for unpriviledges users (like the kids) and read/write access for the grownups.
User       Groups
media    other,media
joseph   other,media
sarah      staff,grownups,media
john       staff,grownups,media

I know that I should work out the correct ACL but I just went into the opensolaris filemanager right-clicked on the folder and went to the permissions tab. I set staff to have full access and ‘others’ (e.g. those in the media group) only read access. I I’m struck by a flamingo I’ll sort out the correct ACL setup.

So I can restrict write permissions for the shares that contain anything valuable (like the family photos) and also restrict read access to the film that I have ripped that are 12 certificate and over.

For the future???

1. Automount home directories
Apparently you just create a file /etc/smbautohome and add the line… *   /export/home/&
and magically the home directory of the unix user will be mounted.

2. Proper ACL for different levels of access to files being server

Reference sources

There’s a good guide here – http://wiki.genunix.org/wiki/index.php/Getting_Started_With_the_Solaris_CIFS which includes details of actually installing the service!. There are a few gotchas like not trying to run SAMBA at the same time as the smb-kernel service. NOTE: no SMB/CIFS server is installed by default.
The other definitive source of information in the guide produced by SUN –http://docs.sun.com/app/docs/doc/820-2429

Other sources of information:

This description of setting up an opensolaris file server http://www.h-online.com/open/OpenSolaris-as-a-file-server–/features/112212

This description of howto install the smb packages from the open solaris express DVD – by looping back the iso image as a filesystem – usefull reference! http://osdir.com/ml/os.solaris.opensolaris.storage.general/2008-03/msg00112.html

164 Comments

  1. Travis Said,

    January 31, 2015 @ 10:48 am

    .

    ñïñ çà èíôó….

  2. luis Said,

    January 31, 2015 @ 11:18 am

    .

    good info!…

  3. edwin Said,

    January 31, 2015 @ 11:49 am

    .

    ñïàñèáî çà èíôó!!…

  4. Jack Said,

    January 31, 2015 @ 12:19 pm

    .

    áëàãîäàðþ!!…

  5. Lynn Said,

    February 4, 2015 @ 2:29 am

    .

    ñïàñèáî!…

  6. Shaun Said,

    February 5, 2015 @ 7:50 am

    .

    ñýíêñ çà èíôó….

  7. Raul Said,

    February 5, 2015 @ 8:22 am

    .

    tnx for info….

  8. Joshua Said,

    February 5, 2015 @ 10:03 pm

    .

    thank you….

  9. Willie Said,

    February 7, 2015 @ 12:14 pm

    .

    ñïñ çà èíôó!!…

  10. Marshall Said,

    February 8, 2015 @ 3:16 pm

    .

    good….

  11. Troy Said,

    February 10, 2015 @ 11:48 pm

    .

    ñïñ….

  12. raul Said,

    February 11, 2015 @ 8:36 pm

    .

    good info!!…

  13. Clyde Said,

    February 13, 2015 @ 1:22 pm

    .

    good info….

  14. richard Said,

    February 13, 2015 @ 11:26 pm

    .

    ñýíêñ çà èíôó….