Samba

Samba is the unix SMB daemon of choice.

Commands

/usr/bin/net

Samba has a generically named binary file called net, which matches the windows command. It's used to manage Samba and CIFS servers.

testparm

testparm - check an smb.conf configuration file for internal correctness. This is great for having a heavily commented main file, like smb.conf.master, then generating the bare smb.conf from that file using testparm -s smb.conf.master > smb.conf.

smbtree

The smbtree tool will print out a tree list of all the reachable samba shares.

Tips

get info from winbind

wbinfo

Clear name resolution cache

net cache flush

Get a remote rpc shell

net rpc shell -U $user_name -S $host_name

Show open sessions on local server

net status shares

Show open files on remote server

net rpc file -S $server_name

mount -t smbfs -o username=$user_name //$server_name/C$ $local_share_name

mount_smbfs "//domain_name;username@hostname/groups" asdf

Kill all Samba sessions for a given user, hence forcing refresh of their group memberships

net status sessions | grep johndoe | awk '{print $1}' | xargs sudo kill

Join domain in ads security mode

net ads join -U dhoherd@DOMAIN.EXAMPLE.COM

Leave domain:

net ads leave -U dhoherd@DOMAIN.EXAMPLE.COM

Upgrading Supermicro firmware

Supermicro iKVM can only mount ISOs that are hosted on Samba shares... 🙄 In my experience they also only support the old and vulnerable SMBv1 protocol. (wannacry used SMBv1.) In order to host ISOs for use with iKVM, it's useful to run Samba in Docker so it is isolated and only running while you are using it.

This example uses the docker image dperson/samba to start a Samba server sharing one passwordless /public share which mounts $HOME/isos from outside the container.

docker run \
  --name "$USER-samba" \
  --rm \
  -d \
  -p 139:139 \
  -p 445:445  \
  -v $HOME/isos:/public  \
  -d dperson/samba \
  -s "public;/public" \
  -g "server min protocol = NT1" \
  -g "log level = 3"