# Samba config file created using SWAT
# from 10.0.0.110 (10.0.0.110)
# Date: 2006/04/19 17:44:22

[global]
	workgroup = DOMAIN
	netbios name = FILESERVER
	server string = Samba
	interfaces = 10.0.0.30
	bind interfaces only = Yes
	passdb backend = ldapsam:ldaps://ldap.domain.com
	enable privileges = Yes
	passwd program = /usr/sbin/smbldap-passwd %u
	passwd chat = *New*password* %n\n *Retype*new*password* %n\n *all*authentication*tokens*updated*
	syslog = 0
	log file = /var/log/samba/log.%m
	max log size = 1000
	time server = Yes
	socket options = IPTOS_LOWDELAY TCP_NODELAY
	add user script = /usr/sbin/smbldap-useradd -m "%u"
	delete user script = /usr/sbin/smbldap-userdel "%u"
	add group script = /usr/sbin/smbldap-groupadd -p "%g"
	delete group script = /usr/sbin/smbldap-groupdel "%g"
	add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
	delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
	set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
	add machine script = /usr/sbin/smbldap-useradd -a -w "%u"
	logon script = logon.bat
	logon path = \\%L\profiles\%U
	logon drive = H:
	logon home = \\%L\home\%U
	domain logons = Yes
	os level = 255
	preferred master = Yes
	domain master = Yes
	ldap admin dn = cn=manager,cn=internal,dc=domain,dc=com
	ldap delete dn = Yes
	ldap group suffix = ou=Groups
	ldap idmap suffix = ou=Idmap
	ldap machine suffix = ou=Computers
	ldap passwd sync = Yes
	ldap suffix = ou=accounts,dc=domain,dc=com
	ldap ssl = no
	ldap user suffix = ou=Users
	panic action = /usr/share/samba/panic-action %d
	idmap backend = ldap:ldaps://10.0.0.13
	idmap uid = 10000-20000
	idmap gid = 10000-20000
	winbind cache time = 600
	ldapsam:trusted = yes
	invalid users = root

(removed many shares like this one)

[SUtilisateurs]
	comment = Utilisateurs
	path = /data/utilisateurs
	valid users = @GUsers, @GAdmin
	read only = No
	acl group control = Yes
	create mask = 0660
	directory mask = 0770
	inherit permissions = Yes
	inherit acls = Yes

[netlogon]
	path = /data/netlogon
	locking = No

[profiles]
	comment = Profiles
	path = /data/profiles
	valid users = @GUsers, @GAdmin
	read only = No
	create mask = 0600
	directory mask = 0700

[homes]
	comment = Home Directories
	valid users = @GUsers, @GAdmin
	read only = No
	create mask = 0660
	directory mask = 0750

[home]
	comment = Homes Directories
	path = /data/home
	valid users = @GUsers, @GAdmin
	read only = No
	create mask = 0600
	directory mask = 0700