1.3. Setting up Samba as a standalone server

Procedure

1. Install the samba package:

   # dnf install samba

2. Edit the /etc/samba/smb.conf file and set the following parameters:

   [global]
   	workgroup = Example-WG
   	netbios name = Server
   	security = user
   
   	log file = /var/log/samba/%m.log
   	log level = 1

   This configuration defines a standalone server named Server within the Example-WG work group. Additionally, this configuration enables logging on a minimal level (1) and log files will be stored in the /var/log/samba/ directory. Samba will expand the %m macro in the log file parameter to the NetBIOS name of connecting clients. This enables individual log files for each client.

3. Optional: Configure file or printer sharing. See:

   • Setting up a Samba file share that uses POSIX ACLs
   • Setting up a share that uses Windows ACLs
   • Setting up Samba as a Print Server

4. Verify the /etc/samba/smb.conf file:

   # testparm

5. If you set up shares that require authentication, create the user accounts.

   For details, see Creating and enabling local user accounts.

6. Open the required ports and reload the firewall configuration by using the firewall-cmd utility:

   # firewall-cmd --permanent --add-service=samba
   # firewall-cmd --reload

7. Enable and start the smb service:

   # systemctl enable --now smb

Procedure

1. Create the operating system account:

   # useradd -M -s /sbin/nologin example

   This command adds the example account without creating a home directory. If the account is only used to authenticate to Samba, assign the /sbin/nologin command as shell to prevent the account from logging in locally.

2. Set a password to the operating system account to enable it:

   # passwd example
   Enter new UNIX password: password
   Retype new UNIX password: password
   passwd: password updated successfully

   Samba does not use the password set on the operating system account to authenticate. However, you need to set a password to enable the account. If an account is disabled, Samba denies access if this user connects.

3. Add the user to the Samba database and set a password to the account:

   # smbpasswd -a example
   New SMB password: password
   Retype new SMB password: password
   Added user example.

   Use this password to authenticate when using this account to connect to a Samba share.

4. Enable the Samba account:

   # smbpasswd -e example
   Enabled user example.