[global]

ea support = yes
map acl inherit = yes
nt acl support = yes

#inherit acls
#inherit owner
#inherit permissions


# !!! POZOR !!! nutne nastavit pro sambu 3.0.25 a vyssi !!!
msdfs root = yes

#kernel change notify = no

debug level = 10

oplocks = yes
kernel oplocks = no
level2 oplocks = no

vfs object = recycle
                recycle:repository = .recycle/%U
#                recycle:maxsize = 49283072
                recycle:maxsize = 50000000
                recycle:exclude = *.tmp *.temp *.o *.obj ~$*
                recycle:exclude_dir = profile* tmp temp cache
                recycle:versions = yes
                recycle:touch = yes
                recycle:keeptree = yes
                
#vfs objects = full_audit
#full_audit:success = link unlink rmdir write mkdir rename open
#full_audit:success = open opendir link unlink rmdir write close closedir mkdir read rename connect disconnect
#full_audit:prefix = %u|%m|%I
#full_audit:failure = none


passdb backend = tdbsam:/etc/samba/passdb.tdb

#	smb passwd file = /etc/samba/smbpasswd

	name resolve order = wins bcast hosts
	dos filetimes = yes

	os level = 128
	local master = yes
	preferred master = yes
	domain master = yes

	create mask = 671
	directory mask = 771
	map system = yes
	wide links = yes
	map hidden = yes
	server string = 
	time server = yes
        workgroup = linuxbox
	delete readonly = yes
	passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
	hide dot files = no
	netbios name = lbox
	dos charset = CP852
#	unix charset = ISO8859-2
	unix charset = UTF-8
;	invalid users = mail, daemon, adt
	writeable = yes
	map archive = no
	null passwords = yes
	log file = /var/log/samba/log.%m
	max log size = 5000
	dns proxy = no 
	map to guest = bad user
	passwd program = /usr/bin/passwd %u
	encrypt passwords = yes
;	password level = 12
;	username level = 12
	password level = 8
	username level = 8
	hosts allow = 127. 10.76. 10.67. 172.30.
	unix password sync = yes
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	guest account = smbuser
        security = user
	wins support = yes
	username map = /etc/samba/smbusers


#        printing = lprng
#        printcap name = /etc/printcap
#        use client driver = yes

#080806lde
	printcap name = /dev/null
	printing      = cups
        load printers = no

	domain logons = yes
#        domain admin group = root admin @ntadmins
        add user script = /usr/sbin/useradd -d /dev/null -g 10000 -s /bin/false -M %u
#051107dma
	add machine script = /usr/sbin/useradd -d /dev/null -g 10000 -s /bin/false -M %u
			
        logon script = startup.bat

# pro Win 9x
#        logon home = \\%N\%U\profile9x
        logon home = \\%N\%U
	
# pro Win NT
        logon path = \\%N\%U\profileNT
	logon drive = U:

   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no

[homes]
	path = %H/sdileni
	browseable = no
	create mode = 611
	directory mode = 700
	strict allocate = yes


#[faxy_prichozi]
#	force create mode = 220
#	force directory mode = 220
#	force group = smbgroup
#	path = /var/spool/fax/recvq
#	public = yes


[home]
	path = /home
	comment = export adresare /home
	force directory mode = 220
	force create mode = 220
	create mode = 675
	directory mode = 775

	veto files = /*zabava*/*zalohy/

#070718rmz - asi spatne ?
#[zabava]
#	force create mode = 220
#	force directory mode = 220
#	create mode = 677
#	directory mode = 777
#	path = /home/archiv/zabava
#	public = yes

#070718rmz - asi spatne ?
#[music]
#	force create mode = 220
#	force directory mode = 220
#	create mode = 677
#	directory mode = 777
#	path = /home/archiv/zabava/music
#	public = yes


[archiv]
	path = /home/archiv
	force create mode = 220
	force directory mode = 220

	veto files = /*zabava*/


[dokumenty]
	force create mode = 220
	force directory mode = 220
	path = /home/sdileni/dokumenty

[zakazky]
	force create mode = 220
	force directory mode = 220
	path = /home/lbox/zakazky

[netlogon]
	path = /home/sdileni/netlogon
	comment = Network Logon Service
	force create mode = 220
	force directory mode = 220
	force user = smbuser
	force group = smbgroup
	writeable = yes
	public = yes
	root preexec = /etc/lbox/samba/check_quota_logon.sh %U

#[tisk_demobox]
#        path = /var/spool/samba
#        printer = rp0
#        comment = tisk u Daldy na PC
#        printable = yes
#        public = yes
#
##       print command = sudo -u "#0" /usr/bin/lpr  -P%p -r %s
#       print command = sudo -u "#0" /usr/bin/lpr  -P%p %s >/tmp/print.out 2>/tmp/print.err
#       lpq command   = sudo -u "#0" /usr/bin/lpq  -P%p
#       lprm command  = sudo -u "#0" /usr/bin/lprm -P%p %j
#       lppause command = sudo -u "#0" /usr/sbin/lpc hold %p %j
#       lpresume command = sudo -u "#0" /usr/sbin/lpc release %p %j
#       queuepause command = sudo -u "#0" /usr/sbin/lpc  -P%p stop
#       queueresume command = sudo -u "#0" /usr/sbin/lpc -P%p start

[tisk_SCX-4x20]
        path = /var/spool/samba
        printer = tisk_SCX-4x20
        comment = tiskarna: Samsung SCX-4x20
        printable = yes
        public = yes

[tisk_CLP-550]
        path = /var/spool/samba
        printer = tisk_CLP-550
        comment = tiskarna: Samsung CLP-550 Series PCL 6
        printable = yes
        public = yes

[antivir]
	path = /home/sdileni/antivir
	force group = smbgroup
	force user = smbuser
	public = yes
	level2 oplocks = yes
	max connections = 2

[instalace]
	force user = smbuser
	valid users = +spolecnici,+administrator
	path = /home/sdileni/instalace
	write list = +spolecnici,+administrator
	level2 oplocks = yes
	force group = smbgroup

[zalohy]
	path = /mnt/hde1/zalohy
	force create mode = 220
	force directory mode = 220
	force user = root
	force group = root
	writeable = yes
	valid users = doudy
	write list = doudy

[ucetni]
	path = /home/sdileni/ucetni
	force create mode = 220
	force directory mode = 220
	force user = smbuser
	force group = smbgroup
	writeable = yes
	valid users = doudy,kopi,pazdziorova
	write list = doudy,kopi,pazdziorova

[ucetni-lb]
	path = /home/sdileni/ucetni-lb
	force create mode = 220
	force directory mode = 220
	force user = smbuser
	force group = smbgroup
	writeable = yes
#	valid users = +"linuxbox\spolecnici"	NEE
#	valid users = +"DOMAIN\spolecnici"	OK
	valid users = +spolecnici
	write list = spolecnici

[predvadecka]
	force create mode = 220
	valid users = doudy,polasek
	path = /home/sdileni/predvadecka
	write list = doudy,polasek
	force directory mode = 220
	force group = smbgroup


[var-samba-dla]
	path = /var/tmp/samba-dla
	force directory mode = 220
	force create mode = 220
	create mode = 675
	directory mode = 775

#	security mask = 0777