samba/DFS

[root@fs ~]# cat /etc/samba/smb.conf
[global]
  workgroup = BIOSYM
  security = ADS
  realm = BIOSYM.LOCAL
  log file = /var/log/samba/%m.log
  kerberos method = secrets and keytab
  client signing = yes
  client use spnego = yes
[data]
  path=/data
  read only=no
 
[root@fs ~]# firewall-cmd --add-service=samba --permanent && firewall-cmd --reload
 
[root@fs ~]# semanage fcontext -a -t samba_share_t /data
[root@fs ~]# restorecon -R -v /data
 
[root@fs ~]# chmod 777 /data

[root@ad ~]# vi /opt/samba/etc/smb.conf
# Global parameters
[global]
        dns forwarder = 10.10.0.254
        netbios name = AD
        realm = BIOSYM.LOCAL
        server role = active directory domain controller
        workgroup = BIOSYM
        idmap_ldb:use rfc2307 = yes
 
        host msdfs = Yes
 
[sysvol]
        path = /opt/samba/var/locks/sysvol
        read only = No
 
[netlogon]
        path = /opt/samba/var/locks/sysvol/biosym.local/scripts
        read only = No
 
[dfs]
        inherit acls = No
        msdfs root = Yes
        path = /dfs
        read only = No
 
[root@ad ~]# systemctl restart samba
[root@ad ~]# mkdir /dfs
[root@ad ~]# cd /dfs
 
[root@ad dfs]# ln -s msdfs:fs\\data fs-data
 
[root@ad dfs]# ln -s msdfs:emfs\\data emfs-data