shell练习-samba共享搭建及账号创建

samba共享搭建及账号创建
#!/bin/bash
#about:ffing.cn

#samba共享基目录：默认/Share_Dir，可自行修改
#本脚本创建的共享目录都在基目录之下
#牵涉共享组成员管理，放弃!!中文共享名!!

#基目录
SMBDIR=/Share_Dir
mkdir -p $SMBDIR

############################  函数start ############################
#创建系统用户
FUNUSERADD(){
cat /etc/passwd|awk -F":" '{print $1}'|grep "^$USERNAME$" >/dev/null 2>&1
if [  $? -eq 0 ];then
FUNPASSWD123456
echo -e "\e[32m $USERNAME 用户名创建完成，初始密码123456\e[0m"

else
        useradd -M -n -s /sbin/nologin $USERNAME  >/dev/null 2>&1
        if [  $? -eq 0 ];then
        FUNPASSWD123456
        echo -e "\e[32m $USERNAME 用户名创建完成，初始密码123456\e[0m"
        else
        echo -e "\e[31m $USERNAME 用户名创建失败，请输入有效的用户名\e[0m"
        fi
fi

}





#初始密码123456
FUNPASSWD123456(){
smbpasswd -a $USERNAME <<EOF  >/dev/null 2>&1
123456
123456
EOF
}





#用户追加组
FUNDANDGROUP(){
usermod -a -G  $GROUP $USERNAME
}



#判断smb用户是否存在
FUNCHECKUSERNAMEYES(){
while true
do
read -p "请输入要修改密码的用户名：" USERNAME
pdbedit -L |cut -d":" -f1|grep "^$USERNAME$" >/dev/null 2>&1
if [  $? -eq 0 ];then
break
else
    echo -e "\e[31m 错误用户名不存在，请输入存在的用户名！\e[0m"
fi
done
}

FUNCHECKUSERNAMENO(){
while true
do
read -p "请输入新的用户名：" USERNAME
if [ ! -z $USERNAME ];then
        pdbedit -L |cut -d":" -f1|grep "^$USERNAME$" >/dev/null 2>&1
        if [  $? -eq 0 ];then
            echo -e "\e[31m 错误用户名已存在，请输入新的用户名！\e[0m"
        else
        break
        fi
fi
done
}




#输入SMB密码
FUNPASSWD(){
while true
do
read -p "请输入密码：" PASSWD
if [ -z $PASSWD  ];then
echo -e "\e[31m 输入错误，密码不能为空！ \e[0m"
else
break
fi
done
}



#执行SMB密码
FUNRUNPASSWD(){
smbpasswd -a $USERNAME <<EOF >/dev/null 2>&1
$PASSWD
$PASSWD
EOF

echo -e "\e[32m $USERNAME 密码设置完成\e[0m"
}



#创建共享目录名
FUNGROUPADD(){
while true
do
read -p "请输入新的共享名：" GROUP
if [ ! -z $GROUP ];then 
    cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |grep "^$GROUP$" >/dev/null 2>&1
    if [ $? -eq 0 ];then
    echo -e "\e[31m $GROUP 共享目录已存在，请重新输入\e[0m"
    else
    groupadd $GROUP > /dev/null 2>&1

                if [ $? -eq 0 ];then
                echo -e "\e[32m $GROUP 共享目录名创建完成\e[0m"
                break
                else
                echo -e "\e[31m 错误，请输入有效的共享目录名！\e[0m"
                fi
    fi
fi
done
}





#创建共享目录
FUNMKDIR(){
cd $SMBDIR
mkdir -p $GROUP
}

#目录授权
#配置samba目录所有者
FUNOWNDIR(){
cd $SMBDIR
chown -R :$GROUP $GROUP
chmod 770 $GROUP
}


#samba全局配置
FUNGLCONF(){
echo "
[global]
     workgroup = WORKGROUP
     security = user
     passdb backend = tdbsam
     printing = cups
     printcap name = cups
     load printers = yes
     cups options = raw
" > /etc/samba/smb.conf
}

#添加共享名配置
FUNADDCONF(){
sed -i '/\['"$GROUP"'\]/,+6d' /etc/samba/smb.conf 
echo "
[$GROUP]
    path =$SMBDIR/$GROUP
    browseable =yes
    guest ok =no
    writable =yes
    create mask =0644
    directory mask =0755
" >> /etc/samba/smb.conf
}












#修改SMB用户密码
FUNMODPASSWD(){
#输入密码   
FUNPASSWD
#执行SMB密码
FUNRUNPASSWD
}















#修改SMB共享目录名称
FUNMODDGROUP(){
while true
do
FUNLISTGROUP
read -p "请输入要被修改的共享名(回车返回上级)：" GROUP
if [ -z $GROUP ];then
break
else
    cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |grep "^$GROUP$" >/dev/null 2>&1
    if [ $? -eq 0 ];then
            while true
            do
            read -p "请输入新的共享名：" NEWGROUP
            if [ ! -z $NEWGROUP ];then
            groupmod -n   $NEWGROUP $GROUP  >/dev/null 2>&1
                if [  $? -eq 0 ];then
                    #修改本地共享目录名称
                    cd $SMBDIR
                    mv  $GROUP  $NEWGROUP
                    #修改SMB配置中共享名
                    sed -i "s/\[$GROUP\]/\[$NEWGROUP\]/" /etc/samba/smb.conf
                    echo -e "\e[32m 修改共享目录名称完成\e[0m"
                    break 2
                else
                echo -e "\e[31m 错误，请输入有效的共享目录名\e[0m"
                fi

            fi
            done
    else
    echo -e "\e[31m 错误，共享目录名不存在！\e[0m"
    fi  
fi
done
}



#查询共享组里存在哪些用户
FUNGROUPUSER(){
#获取组ID
GROUPID=` cat /etc/group |awk -F ":" '{print $1 " " $3}'|grep "^$GROUP " |awk '{print $2}' `
#获取组用户
echo > /tmp/ingroupuser
echo > /tmp/outgroupuser
        for USERNAME in `pdbedit -L |cut -d":" -f1`
        do
        id $USERNAME |awk -F"=" '{print $4}'|tr "," "\n"|cut -d "(" -f2|cut -d ")" -f1 |grep "^$GROUP$" >/dev/null 2>&1
            if [  $? -eq 0 ];then
            echo "$USERNAME" >> /tmp/ingroupuser
            else
            echo "$USERNAME" >> /tmp/outgroupuser
            fi
        done
echo "\/\/\/\/\/\/\/\/\/\/\/\/\/\//\/\/\/\/\/\//\/\/\/\/\//\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/"
echo -e "\e[32m $GROUP 共享中已存在以下用户： \e[0m"
cat /tmp/ingroupuser |tr "\n" "\t"
echo
echo -e "\e[33m $GROUP 共享中未存在以下用户： \e[0m"
cat /tmp/outgroupuser|tr "\n" "\t"
echo
}










#所有共享目录总数
FUNSMBDIRSUM(){
SMBDIRSUM=`cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |wc -l`
echo "当前Samba共享目录：$SMBDIRSUM 个"
}

#列出共享权限信息
FUNLISTAUTH(){
FUNSMBDIRSUM
for GROUP in `cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1`
do
#获取组ID
GROUPID=` cat /etc/group |awk -F ":" '{print $1 " " $3}'|grep "^$GROUP " |awk '{print $2}' `
#获取组用户
echo "\/\/\/\/\/\/\/\/\/\/\/\/\/\//\/\/\/\/\/\//\/\/\/\/\//\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/"
echo -e "\e[33m $GROUP 共享中包含以下用户： \e[0m"
echo > /tmp/groupuser
        for USERNAME in `pdbedit -L |cut -d":" -f1`
        do
        id $USERNAME |awk -F"=" '{print $4}'|tr "," "\n"|cut -d "(" -f2|cut -d ")" -f1 |grep "^$GROUP$" >/dev/null 2>&1
            if [  $? -eq 0 ];then
            echo "$USERNAME" >> /tmp/groupuser
            fi
        done
cat /tmp/groupuser |tr "\n" "\t"
echo
done
}

#列出所有用户名
FUNLISTUSER(){
echo "当前samba用户列表："
echo "------------------------------------------------------------------------------------------"
pdbedit -L |cut -d":" -f1 |tr "\n" "\t"
echo
echo "------------------------------------------------------------------------------------------" 
}




#列出所有共享名
FUNLISTGROUP(){
echo "当前samba共享目录列表："
echo "------------------------------------------------------------------------------------------"
FUNSMBDIRSUM
cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |tr "\n" "\t" 2>/dev/null
echo
echo "------------------------------------------------------------------------------------------"

}












#删除SMB用户
FUNDELUSER(){
while true
do
read -p "请输入要删除的用户名：" USERNAME
if [ ! -z  $USERNAME ];then
smbpasswd -x $USERNAME > /dev/null 2>&1
        if [  $? -eq 0 ];then
        echo -e "\e[32m $USERNAME 用户删除成功\e[0m"
        break
        else
        echo -e "\e[31m $USERNAME 用户删除失败，用户不存在！\e[0m"
        fi
fi
done
}













#删除SMB共享目录配置
FUNDELSMBCONF(){
sed -i '/\['"$GROUP"'\]/,+6d' /etc/samba/smb.conf
}


#删除本地共享目录
FUNDELLOCALDIR(){
cd $SMBDIR
rm -rf $GROUP
}


#删除smb共享配置及目录
FUNDELSMBCONFDIR(){

FUNDELSMBCONF
FUNDELLOCALDIR
}


#删除共享目录及数据
FUNDELSMBDIR(){
while true
do
FUNLISTGROUP    
read -p "请输入要删除的共享名（回车返回上级）："  GROUP
if [  -z $GROUP ];then
break
else

cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |grep "^$GROUP$" >/dev/null 2>&1
        if [ $? -eq 0 ];then
        FUNDELSMBCONFDIR
        echo -e "\e[32m $GROUP 共享目录及数据删除成功 \e[0m"
        break
        else
        echo -e "\e[31m 输入错误，请输入正确的共享名！\e[0m"
        fi
fi
done
}










#删除所有共享用户
FUNDELALLUSER(){
for USER in ` pdbedit -L |cut -d":" -f1`
do  
smbpasswd -x $USER >/dev/null 2>&1
done
}


#删除所有共享目录
FUNDELALLDIR(){
for GROUP in ` cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 `
do
FUNDELSMBCONF
cd $SMBDIR
rm -rf $GROUP
done
}





#共享目录添加用户
FUNSMBDIRADDUSER(){
while true
do
FUNLISTGROUP
read -p "请输入要添加用户的共享名（回车返回上级）：" GROUP
if [ -z $GROUP ];then
    break
else
    cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |grep "^$GROUP$" >/dev/null 2>&1
    if [ $? -eq 0 ] ;then
        while true
        do
        #显示组中存在用户，及未存在的用户
        FUNGROUPUSER

            read -p "请输入$GROUP 共享中要添加的用户名(回车返回上级)：" USERNAME
            if [ -z $USERNAME ];then
                break
            else
                        pdbedit -L |cut -d":" -f1 |grep "^$USERNAME$" >/dev/null 2>&1
                        if [ $? -eq 0 ];then
                        usermod -a -G  $GROUP $USERNAME
                        echo -e "\e[32m $GROUP 共享中添加用户 $USERNAME 完成\e[0m"   
                        else
                        echo -e "\e[31m 输入错误，请输入存在的用户名！\e[0m"
                        fi
            fi
        done
    else
    echo -e "\e[31m 输入错误，请输入正确的共享名！\e[0m"
    fi
fi
done
}







#共享目录删除用户
FUNSMBDELUSER(){
while true
do
FUNLISTGROUP
read -p "请输入要删除用户的共享名（回车返回上级）：" GROUP
if [ -z $GROUP ];then
    break
else
    cat /etc/samba/smb.conf |tail -n +10|grep '^\['|cut -d"[" -f2|cut -d"]" -f1 |grep "^$GROUP$" >/dev/null 2>&1
    if [ $? -eq 0 ] ;then
        while true
        do
        FUNGROUPUSER
            read -p "请输入$GROUP  共享中要删除的用户名（回车返回上级）：" USERNAME
            if [ -z $USERNAME ];then
                break
            else
                        pdbedit -L |cut -d":" -f1 |grep "^$USERNAME$" >/dev/null 2>&1
                        if [ $? -eq 0 ];then
                        gpasswd -d $USERNAME  $GROUP 
                        echo -e "\e[32m $GROUP 共享中删除用户 $USERNAME 完成\e[0m"

                        else
                        echo -e "\e[31m 输入错误，请输入正确的用户名\e[0m"
                        fi
            fi
        done
    else
    echo -e "\e[31m 输入错误，请输入正确的共享名！\e[0m"
    fi
fi
done
}






#关闭selinux、防火墙
FUNSELINUX(){
#关闭selinux
setenforce 0 > /dev/null 2>&1
sed -i 's/enforcing/disable/g' /etc/selinux/config
}
#添加防火墙端口
FUNFWD(){
cat /etc/firewalld/zones/public.xml |grep port=\"139\"/  >/dev/null 2>&1
if [ ! $? -eq 0 ];then
sed -i "/<\/zone>/i <port protocol=\"tcp\" port=\"139\"/>" /etc/firewalld/zones/public.xml
sed -i "/<\/zone>/i <port protocol=\"tcp\" port=\"445\"/>" /etc/firewalld/zones/public.xml
sed -i "/<\/zone>/i <port protocol=\"tcp\" port=\"137\"/>" /etc/firewalld/zones/public.xml
sed -i "/<\/zone>/i <port protocol=\"tcp\" port=\"138\"/>" /etc/firewalld/zones/public.xml
fi
firewall-cmd --reload >/dev/null 2>&1
}

#重启smb
FUNRESTARTSMB(){
systemctl restart smb >/dev/null 2>&1
}

#启动samba、开机启动
FUNSTARTSMB(){

systemctl restart smb  >/dev/null 2>&1
systemctl enable smb >/dev/null 2>&1
}


#判断启动状态
FUNSTATUSSMB(){
systemctl status smb >/dev/null 2>&1
if [ $? -eq 0 ];then
    echo -e "\e[32m smb启动状态：成功 \e[0m"
else
    echo -e "\e[31m smb启动状态：失败 \e[0m"
fi
}




#IP

IPLAN=`hostname -I |awk '{print $1}'`
IPWAN=`curl http://pv.sohu.com/cityjson 2>> /dev/null | awk -F '"' '{print $4}'`



#display
FUNDISPLAY(){
echo -e "\e[33m
=================================================
samba外网：$IPWAN
Samba内网：$IPLAN
samba基目录：$SMBDIR
samba默认添加共享：$GROUP
Samba默认添加账号：$USERNAME
Samba默认添加密码：$PASSWD
================================================= \e[0m"
}




#yum-check-rpm
FUNCHECKRPM(){
RPM=samba
echo "正在检测 $RPM 安装包"    
yum provides $RPM >/dev/null 2>&1
if [ ! $? -eq 0 ];then
    echo -e "\e[31m 错误！yum源中未能找到 $RPM 安装包，请检测yum源或网络连接！ \e[0m"
    exit
fi
}

#yum-install-rpm
FUNYUMRPM(){
echo "yum -y install $RPM" >/tmp/yuminstall
nohup bash /tmp/yuminstall  >/tmp/test 2>&1 &
}


#yun-check-installing
FUNCHECKYUM(){
while  [ $? -eq 0 ]
do
echo "$RPM 安装中，请等待 。。。 "
sleep 3
ps -ef |grep -v grep|grep "yum.*install.*$RPM.*" >/dev/null 2>&1
done
echo "$RPM 安装完成"
}        















#静默安装install
FUNINSTALL(){
#安装samba
FUNCHECKRPM
FUNYUMRPM
FUNCHECKYUM
#创建共享目录名
GROUP=ffing
groupadd $GROUP >/dev/null 2>&1
#创建共享目录
cd $SMBDIR
mkdir  -p $GROUP
#目录权限
FUNOWNDIR
#创建共享用户
USERNAME=ffing
useradd -g $GROUP -M -s /sbin/nologin $USERNAME >/dev/null 2>&1
#samba密码
PASSWD=123456
smbpasswd -a $USERNAME <<EOF >/dev/null 2>&1
$PASSWD
$PASSWD
EOF
#配置samba
FUNGLCONF
FUNADDCONF
#关闭selinux
FUNSELINUX
#防火墙放行
FUNFWD
#samba启动
FUNSTARTSMB
#samba状态
FUNSTATUSSMB
#display
FUNDISPLAY
}
############################函数end############################






























#判断是否存在samba
smbd --version > /dev/null 2>&1
if [ ! $? -eq 0 ];then
FUNINSTALL
fi



while true
do
echo "
=============================================================================================
                |-- 1.重置samba(清除所有用户及共享数据)
                |
                |-- 2.查看共享权限
                |
                |               |-- 添加用户
                |-- 3.用户管理--|-- 修改密码  
                |               |-- 删除用户
     Samba      |
     架构图     |               |-- 添加共享目录
                |-- 4.目录管理--|-- 修改目录名称
                |               |-- 删除共享目录
                |
                |               |-- 共享目录添加授权用户
                |-- 5.权限管理--|  
                |               |-- 共享目录删除授权用户
                |
                |-- 0.退出
=============================================================================================
Samba外网：$IPWAN  Samba内网：$IPLAN  Samba基目录：$SMBDIR 
注：本脚本创建的共享目录都在基目录之下，牵涉共享组成员管理!!放弃中文共享名!!
---------------------------------------------------------------------------------------------"
    read -p "请选择：" SUM
    case $SUM in
        1)
        FUNDELALLUSER
        FUNDELALLDIR
        FUNINSTALL
        ;;


        2)
        FUNLISTAUTH
        ;;

        3)
        while true
        do
            #列出用户
            FUNLISTUSER
            echo "1.添加用户"
            echo "2.修改密码"
            echo "3.删除用户"
            read -p "请选择（回车返回上级）：" NUM
            if [ -z  $NUM ];then
            break
            else
            case $NUM in
                1)
                #检测用户是否存在
                FUNCHECKUSERNAMENO
                #添加用户
                FUNUSERADD
                ;;

                2)

                #原用户名判断
                FUNCHECKUSERNAMEYES
                #设置密码
                FUNPASSWD
                FUNRUNPASSWD

                ;;

                3)
                FUNDELUSER

                ;;
                *)
                echo -e "\e[31m 错误，请输入1~3！\e[0m"
                ;;              

            esac
            fi  
        done
        ;;

        4)
        while true
        do
        #列出共享目录
        FUNLISTGROUP
        echo "1.添加共享目录"
        echo "2.修改共享目录名称"
        echo "3.删除共享目录及数据"
        read -p "请选择（回车返回上级）：" NUM
        if [ -z $NUM ];then
            break
        else
            case $NUM in
                1)
                FUNGROUPADD
                FUNMKDIR
                FUNOWNDIR
                FUNADDCONF
                FUNRESTARTSMB
                ;;

                2)
                FUNMODDGROUP
                FUNRESTARTSMB
                ;;

                3)
                FUNDELSMBDIR

                FUNRESTARTSMB
                ;;
                *)
                echo -e "\e[31m 错误，请输入1~3！\e[0m"
                ;;              

            esac
        fi
        done
        ;;

        5)
        while true
        do
        FUNLISTGROUP
        FUNLISTUSER
        echo "1.共享目录添加授权用户"
        echo "2.共享目录删除授权用户"
        read -p "请选择（回车返回上级）：" NUM
        if [ -z $NUM ];then
            break
        else
            case $NUM in
                1)
                FUNSMBDIRADDUSER
                ;;

                2)
                FUNSMBDELUSER
                ;;

                *)
                echo -e "\e[31m 错误，请输入1~2！\e[0m"
                ;;
            esac
        fi
        done
        ;;

        0)
        exit
        ;;


        *)
        echo -e "\e[31m 错误，请输入1~5！\e[0m"
        ;;

    esac
done