6.3. SMB

1. Create a replicate volume. This volume will host only a zero byte lock file, hence choose minimal sized bricks. To create a replicate volume run the following command:

   # gluster volume create volname replica n ipaddress:/brick path.......N times

   where,
   N: The number of nodes that are used as Samba servers. Each node must host one brick.
   For example:

   # gluster volume create ctdb replica 3 10.16.157.75:/rhgs/brick1/ctdb/b1 10.16.157.78:/rhgs/brick1/ctdb/b2 10.16.157.81:/rhgs/brick1/ctdb/b3

2. In the following files, replace "all" in the statement META="all" to the newly created volume name

   /var/lib/glusterd/hooks/1/start/post/S29CTDBsetup.sh
   /var/lib/glusterd/hooks/1/stop/pre/S29CTDB-teardown.sh

   For example:

   META="all"
     to
   META="ctdb"

3. In the /etc/samba/smb.conf file add the following line in the global section on all the nodes:

   clustering=yes

4. Start the volume.
   The S29CTDBsetup.sh script runs on all Red Hat Gluster Storage servers, adds an entry in /etc/fstab/ for the mount, and mounts the volume at /gluster/lock on all the nodes with Samba server. It also enables automatic start of CTDB service on reboot.

   Note

   When you stop the special CTDB volume, the S29CTDB-teardown.sh script runs on all Red Hat Gluster Storage servers and removes an entry in /etc/fstab/ for the mount and unmounts the volume at /gluster/lock.
5. Verify if the file /etc/sysconfig/ctdb exists on all the nodes that is used as Samba server. This file contains Red Hat Gluster Storage recommended CTDB configurations.
6. Create /etc/ctdb/nodes file on all the nodes that is used as Samba servers and add the IPs of these nodes to the file.

   10.16.157.0
   10.16.157.3
   10.16.157.6

   The IPs listed here are the private IPs of Samba servers.
7. On all the nodes that are used as Samba server which require IP failover, create /etc/ctdb/public_addresses file and add the virtual IPs that CTDB should create to this file. Add these IP address in the following format:

   <Virtual IP>/<routing prefix><node interface>
   

   For example:

   192.168.1.20/24 eth0
   192.168.1.21/24 eth0

8. Start the CTDB service on all the nodes by executing the following command:

   # service ctdb start

1. Run the following command to allow Samba to communicate with brick processes even with untrusted ports.

   # gluster volume set VOLNAME server.allow-insecure on

2. Run the following command to enable SMB specific caching

   # gluster volume set <volname> performance.cache-samba-metadata on
   
   volume set success

   Note

   Enable generic metadata caching to improve the performance of SMB access to Red Hat Gluster Storage volumes. For more information see Section 21.7, “Directory Operations”
3. Edit the /etc/glusterfs/glusterd.vol in each Red Hat Gluster Storage node, and add the following setting:

   option rpc-auth-allow-insecure on

   Note

   This allows Samba to communicate with glusterd even with untrusted ports.
4. Restart glusterd service on each Red Hat Gluster Storage node.
5. Run the following command to verify proper lock and I/O coherency.

   # gluster volume set VOLNAME storage.batch-fsync-delay-usec 0

6. To verify if the volume can be accessed from the SMB/CIFS share, run the following command:

   # smbclient -L <hostname> -U%

   For example:

   # smbclient -L rhs-vm1 -U%
   Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.17]
   
        Sharename       Type      Comment
        ---------       ----      -------
        IPC$            IPC       IPC Service (Samba Server Version 4.1.17)
        gluster-vol1    Disk      For samba share of volume vol1
   Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.17]
   
        Server               Comment
        ---------            -------
   
        Workgroup            Master
        ---------            -------

7. To verify if the SMB/CIFS share can be accessed by the user, run the following command:

   #  smbclient //<hostname>/gluster-<volname> -U <username>%<password>

   For example:

   # smbclient //10.0.0.1/gluster-vol1 -U root%redhat
   Domain=[MYGROUP] OS=[Unix] Server=[Samba 4.1.17]
   smb: \> mkdir test
   smb: \> cd test\
   smb: \test\> pwd
   Current directory is \\10.0.0.1\gluster-vol1\test\
   smb: \test\>

1. Open the /etc/samba/smb.conf file in a text editor and add the following lines for a simple configuration:

   [gluster-VOLNAME]
   comment = For samba share of volume VOLNAME
   vfs objects = glusterfs
   glusterfs:volume = VOLNAME
   glusterfs:logfile = /var/log/samba/VOLNAME.log
   glusterfs:loglevel = 7
   path = /
   read only = no
   guest ok = yes

   The configuration options are described in the following table:

   Table 6.7. Configuration Options

   Configuration Options	Required?	Default Value	Description
   Path	Yes	n/a	It represents the path that is relative to the root of the gluster volume that is being shared. Hence / represents the root of the gluster volume. Exporting a subdirectory of a volume is supported and /subdir in path exports only that subdirectory of the volume.
   glusterfs:volume	Yes	n/a	The volume name that is shared.
   glusterfs:logfile	No	NULL	Path to the log file that will be used by the gluster modules that are loaded by the vfs plugin. Standard Samba variable substitutions as mentioned in smb.conf are supported.
   glusterfs:loglevel	No	7	This option is equivalent to the client-log-level option of gluster. 7 is the default value and corresponds to the INFO level.
   glusterfs:volfile_server	No	localhost	The gluster server to be contacted to fetch the volfile for the volume. It takes the value, which is a list of white space separated elements, where each element is unix+/path/to/socket/file or [tcp+]IP|hostname|\[IPv6\][:port]

2. Run service smb [re]start to start or restart the smb service.
3. Run smbpasswd to set the SMB password.

   # smbpasswd -a username

   Specify the SMB password. This password is used during the SMB mount.

1. Add the user on all the Samba servers based on your configuration:
   # adduser username
2. Add the user to the list of Samba users on all Samba servers and assign password by executing the following command:
   # smbpasswd -a username
3. Perform a FUSE mount of the gluster volume on any one of the Samba servers:
   # mount -t glusterfs -o acl ip-address:/volname /mountpoint
   For example:

   # mount -t glusterfs -o acl rhs-a:/repvol /mnt

4. Provide required permissions to the user by executing appropriate setfacl command. For example:
   # setfacl -m user:username:rwx mountpoint
   For example:

   # setfacl -m user:cifsuser:rwx /mnt

Verify the Configuration

1. Verify that CTDB is running using the following commands:

   # ctdb status
   # ctdb ip
   # ctdb ping -n all

2. Mount a Red Hat Gluster Storage volume using any one of the VIPs.
3. Run # ctdb ip to locate the physical server serving the VIP.
4. Shut down the CTDB VIP server to verify successful configuration.
   When the Red Hat Gluster Storage server serving the VIP is shut down there will be a pause for a few seconds, then I/O will resume.

1. On all Red Hat Gluster Storage Servers, with elevated privileges, navigate to /var/lib/glusterd/hooks/1/start/post
2. Rename the S30samba-start.sh to K30samba-start.sh.
   For more information about these scripts, see Section 13.2, “Prepackaged Scripts”.

1. Run the following command to disable automatic SMB sharing per-volume:

   # gluster volume set <VOLNAME> user.smb disable