# # Standard Samba config file for UCWB remote sites # #======================= Global Settings ======================= [global] workgroup = WUM3 netbios name = brighton netbios aliases = server string = comment = dns proxy = no reset on zero vc = yes log file = /var/log/samba/log.%m max log size = 1000000 syslog = 0 panic action = /usr/share/samba/panic-action %d log level = 3 winbind:10 idmap:10 # Disable netbios port smb ports = 445 # Testing against RT#6237 (defaults to no since 3.4.0) map untrusted to domain = yes # We rely on wide links for our mirrors to work # Turn off unix extensions to avoid symlink exploit unix extensions = no wide links = yes security = ADS realm = WUMI.ORG.AU password server = wserver3.wumi.org.au encrypt passwords = true invalid users = root load printers = yes printing = cups printcap name = cups printer admin = "@WUM3\it - printer admin" interfaces = lo vlan100 bind interfaces only = yes # winbind separator = '+' # winbind use default domain = yes winbind nested groups = yes winbind enum users = yes winbind enum groups = yes template shell = /bin/false ldap admin dn = cn=admin,dc=ucwb,dc=org,dc=au idmap uid = 10000-20000 idmap gid = 10000-20000 idmap backend = ldap:ldap://ldap.ucwb.org.au ldap idmap suffix = ou=Idmap ldap suffix = dc=ucwb,dc=org,dc=au ldap ssl = no host msdfs = yes ; ; Some defaults for service level parameters ; store dos attributes = yes map hidden = no map system = no map archive = no map read only = no msdfs root = yes #======================= Share Definitions ======================= [homes] comment = Home Directories browseable = no writable = yes create mask = 0700 directory mask = 0700 [printers] comment = All Printers path = /var/spool/samba browseable = no printable = yes public = no writable = no printer admin = "@WUM3\it - printer admin" create mode = 0700 # Windows clients look for this share name as a source of downloadable # printer drivers [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes guest ok = no read only = yes write list = "@WUM3\it - printer admin" [shared] comment = path = /srv/samba/local/shared guest ok = no browseable = yes writeable = yes acl check permissions = true acl group control = yes acl map full control = true inherit acls = no map acl inherit = yes inherit owner = yes create mask = 0660 force create mode = 0660 directory mask = 2770 force directory mode = 2770 [fcd] comment = path = /srv/samba/local/sub_fcd guest ok = no browseable = no writeable = yes acl check permissions = true acl group control = yes acl map full control = true inherit acls = no map acl inherit = yes inherit owner = yes create mask = 0660 force create mode = 0660 directory mask = 2770 force directory mode = 2770 [software] comment = path = /srv/samba/mirror/software guest ok = yes browseable = no writeable = yes acl check permissions = true acl group control = yes acl map full control = true inherit acls = no map acl inherit = yes inherit owner = yes create mask = 0660 force create mode = 0660 directory mask = 2770 force directory mode = 2770 [policies] comment = path = /srv/samba/mirror/Policies guest ok = no browseable = no writeable = no acl check permissions = true acl group control = yes acl map full control = true inherit acls = no map acl inherit = yes inherit owner = yes create mask = 0660 force create mode = 0660 directory mask = 2770 force directory mode = 2770