DEV Community

Cover image for Samba Mastery: The Definitive Guide to Cross-Platform File Sharing (Theory, Setup, & Permanent Mounts)
SAHIL
SAHIL

Posted on

Samba Mastery: The Definitive Guide to Cross-Platform File Sharing (Theory, Setup, & Permanent Mounts)

💻 Understanding Samba: Theory and Purpose
Samba is a free and open-source re-implementation of the Server Message Block (SMB) networking protocol.

📜 Core Theory: SMB/CIFS
Samba's foundation lies in the SMB protocol (which was also referred to as Common Internet File System - CIFS in some older versions).

What it is: SMB is an application-layer network protocol primarily used for providing shared access to files, printers, and serial ports between nodes on a network. It is the core networking protocol used by Microsoft Windows for file and print sharing.

The Problem it Solves: Windows clients (desktops, laptops, servers) are designed to talk to other Windows machines for file sharing using the SMB protocol. Unix-like systems (Linux, macOS) use their own native file sharing protocols (like NFS). Samba acts as a protocol translator/server that allows Unix/Linux machines to speak the SMB language.

How it Works (The Role of Samba): Samba runs on a Unix/Linux host and makes the host appear to Windows clients as a native Windows file and print server. This creates a seamless, cross-platform file-sharing environment.

🌐 Why Samba is Used (Key Use Cases)
Samba is indispensable in heterogeneous networks (those containing both Windows and Unix/Linux machines).

Use Case Description
Cross-Platform File Sharing The primary use: enables Linux/Unix servers to share directories (shares) with Windows clients,
and vice versa.
Print Services Allows Windows clients to print to printers attached to a Linux/Unix server.
Domain Services Samba can function as a Primary Domain Controller (PDC) or a member server in a Windows domain
or Active Directory (AD) environment (using Samba 4.x), managing user authentication and group policies.
Home Directory Access Allows users to access their Linux home directory as a network share
when they log in from a Windows client.

⚙️ Samba Components, Ports, and Installation

🛠️ Key Samba Daemons (Services)
Samba is typically implemented by two main background services, or "daemons," on the server.

Daemon (Service Name) Purpose
smbd (Samba Daemon) Provides the file and print sharing services. It handles the actual SMB/CIFS connections, authentication, and resource sharing.
nmbd (NetBIOS Name Daemon) Provides the NetBIOS-to-IP-address name service (similar to a local DNS for legacy Windows networks). It handles network browsing (NetBIOS over TCP/IP). This is less critical with modern networks using DNS/WSD but is still part of the suite.

🔌 Port Numbers
Samba uses the standard ports for the SMB protocol, which need to be opened on the server's firewall:

Port Protocol Purpose
TCP 139 TCP Used for the NetBIOS Session Service (older SMB traffic).
UDP 137 UDP Used for the NetBIOS Name Service.
UDP 138 UDP Used for the NetBIOS Datagram Service (browsing).
TCP 445 TCP Used for SMB over TCP/IP (Direct host communication without NetBIOS). Primary port for modern SMB/CIFS traffic.

📦 Package Name and Installation
The package name for the Samba server software is usually just samba. Installation commands vary by Linux distribution:

Distribution Installation Command (Server)
Debian/Ubuntu sudo apt update && sudo apt install samba
RHEL/CentOS/Fedora sudo dnf install samba samba-common or sudo yum install samba samba-common

After installation, the services must be started and enabled to start automatically on boot:

sudo systemctl start smbd nmbd

sudo systemctl enable smbd nmbd
Enter fullscreen mode Exit fullscreen mode

📝 Key Configuration Files and Syntax

📁 Main Configuration File
The heart of Samba configuration is the smb.conf file.

Location: Typically found at /etc/samba/smb.conf or /etc/smb.conf.

Syntax: The file is structured into sections enclosed in square brackets ([]), each defining a shared resource or a global setting. Inside each section, parameters are defined using name = value.

Section Purpose Example
[global] Defines overall server settings, like workgroup name, security mode, logging, and other default behaviors. workgroup = WORKGROUP
security = user
[share_name] Defines a specific shared resource (a file share or a printer). Replace share_name with your desired name (e.g., [PublicDocs]). [PublicDocs]
path = /srv/samba/public
read only = No
[homes] A special section that automatically creates a private share for each authenticated user, mapping to their Unix home directory (/home/username). [homes]
comment = Home Directories
browseable = No
[printers] A special section for printer sharing. [printers]
printable = yes
path = /var/spool/samba

🛡️ Essential Global Parameters

Parameter Value Description
workgroup e.g., MYNETWORK The NetBIOS workgroup or domain name the server will belong to. Must match the clients.
security user Most common mode: Client must provide a valid username and Samba password (usually matched to a Unix account).
encrypt passwords yes Critical: Must be set to yes for modern Windows clients.
map to guest Bad User Ensures that connection attempts with invalid users are treated as a guest connection (if guest access is allowed).

📂 Essential Share Parameters (Example for a Read/Write Share)

[PublicData]
   comment = General Shared Folder
   path = /srv/samba/public
   browseable = yes
   writeable = yes
   guest ok = no  ; Requires a valid user/password
   valid users = @staff myuser
   create mask = 0664
   directory mask = 0775
Enter fullscreen mode Exit fullscreen mode

🧑‍💻 Server Configuration Steps (The "How-To")

  • Create the Shared Directory 
sudo mkdir -p /srv/samba/public
sudo chown nobody:nogroup /srv/samba/public # Set initial ownership
sudo chmod 770 /srv/samba/public            # Set permissions
Enter fullscreen mode Exit fullscreen mode

Note: You may also need to configure SELinux or AppArmor to allow Samba access to the shared path.

  • Edit the Configuration File
    Use your preferred editor (nano, vi) to modify /etc/samba/smb.conf and add your share section (like the [PublicData] example above).

  • Create Samba Users
    A user must have a regular Unix account first, then a separate Samba password.

sudo adduser myuser         # 1. Create a standard Unix user
sudo smbpasswd -a myuser    # 2. Add and set a Samba-specific password for the user
sudo systemctl restart smbd nmbd # 3. Restart services to load changes
Enter fullscreen mode Exit fullscreen mode
  • Test the Configuration Use the built-in utility to check for syntax errors:

testparm

  • Configure Firewall Allow the necessary Samba ports through your firewall.

Using firewalld (RHEL/Fedora/CentOS):

sudo firewall-cmd --permanent --add-service=samba
sudo firewall-cmd --reload
Enter fullscreen mode Exit fullscreen mode

Using ufw (Debian/Ubuntu):

sudo ufw allow samba
Enter fullscreen mode Exit fullscreen mode

🌐 Permanent Client Mount (Linux Client)
To permanently access a Samba share on a Linux client (not the server), you typically use the cifs-utils package and the /etc/fstab file.

📦 Client Package Name
The package for the Samba client utility and mounting tools is usually cifs-utils.

Installation (e.g., Ubuntu/Debian): sudo apt install cifs-utils

🔧 Syntax for /etc/fstab
The /etc/fstab file is used to define file systems that should be mounted automatically at boot.

Create a Mount Point

sudo mkdir /mnt/samba_share

Create a Credential File (for security)

Store your username and password in a secure file (e.g., /etc/samba/credentials.txt) and restrict its permissions:

username=myuser
password=my_samba_password
sudo chmod 600 /etc/samba/credentials.txt
Enter fullscreen mode Exit fullscreen mode

Add Entry to /etc/fstab
Add the following line to /etc/fstab.

**Syntax**:
//SAMBA_SERVER_IP/ShareName  /mount/point  cifs  credentials=/path/to/credentials,uid=local_user,gid=local_group,iocharset=utf8,vers=3.0  0  0

//192.168.1.100/PublicData  /mnt/samba_share  cifs  credentials=/etc/samba/credentials.txt,uid=1000,gid=1000,iocharset=utf8,vers=3.0  0  0

//192.168.1.100/PublicData: The network location (//server_ip_or_name/share_name).

/mnt/samba_share: The local mount directory.
Enter fullscreen mode Exit fullscreen mode

cifs: The file system type (for mounting Samba/SMB shares).

credentials=...: Points to the secure file with the Samba user and password.

uid=1000,gid=1000: Sets the ownership of all files on the mounted share to the local user with UID 1000 (usually the first non-root user).

vers=3.0: Specifies the SMB protocol version (3.0 is a common modern, secure version).

Mount the Share
Mount the new entry without rebooting:

sudo mount -a
Enter fullscreen mode Exit fullscreen mode

If successful, you should see the contents of the share in /mnt/samba_share.

Thank you so much for reading.
Leave a like and anything you want to add or improve.

Top comments (0)