[global] ##################################################################### # Server Settings ##################################################################### panic action = "/usr/local/bin/panic-action %d" pid directory = /var/run/samba log file = /var/log/samba/%m.log interfaces = 127.0.0.1 192.168.29.4 bind interfaces only = true log level = 1 ldap debug level = 0 ##################################################################### # Samba Server Options ##################################################################### netbios name = genome server string = workgroup = MUC os level = 64 encrypt passwords = yes local master = yes domain master = yes domain logons = yes time server = yes logon script = logonscript.bat logon path = \\%L\Profiles\%U logon drive = H: logon home = \\%L\%U mangling method = hash2 utmp = no unix extensions = yes enable privileges = yes guest account = nobody #map to guest = Bad User map to guest = Never load printers = yes printing = lprng printcap name = /etc/printcap admin users = administrator veto files = /.AppleDouble/.AppleDesktop/Network Trash Folder/TheFindByContentFolder/TheVolumeSettingsFolder/.viminfo/.bash_history/Platform.ini/PUTTY.RND/lost+found/ delete veto files = yes ##################################################################### # Password Management ##################################################################### passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = uid=samba,ou=Users,dc=mr,dc=lfmg,dc=de ldap suffix = dc=mr,dc=lfmg,dc=de ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap idmap suffix = ou=Idmap ldap passwd sync = Yes ldap ssl = no ldap delete dn = Yes #add user script = /usr/local/sbin/smbldap-useradd -m "%u" #delete user script = /usr/local/sbin/smbldap-userdel "%u" add group script = /usr/local/sbin/smbldap-groupadd -p "%g" delete group script = /usr/local/sbin/smbldap-groupdel "%g" add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" add machine script = /usr/local/sbin/smbldap-useradd -t 0 -w %u set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u" ldapsam:trusted = yes ##################################################################### # Winbindd Settings ##################################################################### #idmap backend = ldap:ldap://192.168.29.4 #idmap uid = 30000-35000 #idmap gid = 30000-35000 #winbind separator = + #winbind enum users = yes #winbind enum groups = yes #template homedir = /home/%U #template shell = /bin/false #winbind nested groups = yes #winbind cache time = 300 #winbind nss info = template #winbind use default domain = yes #winbind trusted domains only = yes ##################################################################### # Wins Name Resolution ##################################################################### #name resolve order = lmhosts wins host bcast name resolve order = lmhosts wins host #wins server = wins support = yes preferred master = yes wins proxy = yes enhanced browsing = no ##################################################################### # Character Settings ##################################################################### unix charset = UTF-8 display charset = UTF-8 dos charset = 850 ##################################################################### # Performance Settings ##################################################################### use sendfile = yes large readwrite = yes socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 SO_RCVBUF=8192 username level = 0 keep alive = 30 kernel oplocks = true veto oplock files = /*.doc/*.xls/*.mdb/ ##################################################################### # Share Settings (Global) ##################################################################### map archive = no map system = no map hidden = no writeable = yes inherit permissions = yes # Dont set the following two options globally. You will get thousend of # [2007/04/19 12:12:09, 1] smbd/vfs.c:reduce_name(982) # reduce_name: couldn't get realpath for peibel/NTUSER.POL # errors. #wide links = no #follow symlinks = no ##################################################################### # Include Files ##################################################################### include = /etc/samba/shares.conf include = /etc/samba/printers.conf