groupadd smbgrp
useradd fielshare -s /sbin/nologin -g smbgrp -p <password>
#创建同名的smb用户, 这里的密码和local用户的密码是完全独立的，我们最后用的通过smbpasswd创建的用户
smbpasswd -a fielshare

mkdir -p /srv/samba/secure
chmod -R 0770 /srv/samba/secure
chown -R root:smbgrp /srv/samba/secure

chcon -t samba_share_t /srv/samba/secure

cp /etc/samba/smb.conf /etc/samba/smb.conf.orig

#为暴露在我的芳邻里点进去看到的文件夹名称
[share]
　　comment = Secure File Server Share
　　# 为需要共享的目录
　　path = /srv/samba/secure
　　# 可访问的用户，多用户用空格隔开, 以@开头为用户组
　　valid users = @smbgrp
　　# 关闭匿名访问，设置为no
　　guest ok = no
　　writable = yes
　　browsable = yes

# See smb.conf.example for a more detailed config file or
# read the smb.conf manpage.
# Run 'testparm' to verify the config is correct after
# you modified it.
[global]
　　workgroup = WORKGROUP
　　netbios name = centos
　　security = user
　　passdb backend = tdbsam
　　printing = cups
　　printcap name = cups
　　load printers = no
　　cups options = raw
[printers]
　　comment = All Printers
　　path = /var/tmp
　　printable = Yes
　　create mask = 0600
　　browseable = No
[print$]
　　comment = Printer Drivers
　　path = /var/lib/samba/drivers
　　write list = @printadmin root
　　force group = @printadmin
　　create mask = 0664
　　directory mask = 0775
　[share]
　　comment = secure file share
　　path = /srv/samba/secure
　　valid users = @smbgrp
　　guest ok = no
　　writable = yes
　　browsable = yes
　　browseable = yes

[root@localhost software]# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[printers]"
Processing section "[print$]"
Processing section "[share]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
# Global parameters
[global]
 load printers = No
 netbios name = CENTOS-SHARE
 printcap name = cups
 security = USER
 idmap config * : backend = tdb
 cups options = raw
[printers]
 browseable = No
 comment = All Printers
 create mask = 0600
 path = /var/tmp
 printable = Yes
[print$]
 comment = Printer Drivers
 create mask = 0664
 directory mask = 0775
 force group = @printadmin
 path = /var/lib/samba/drivers
 write list = @printadmin root
[share]
 comment = secure file share
 path = /home/share
 read only = No
 valid users = @smbgrp
[root@localhost software]#

systemctl restart smb.service
systemctl restart nmb.service

firewall-cmd --permanent --zone=public --add-service=samba
firewall-cmd --reload