# FreeBSD BOX - LDAP - SAMBA - SMBLDAPTOOLS - ISSUES -
#smb.conf has freaking me out!
#had loked at smb.conf(4) and google, but withou sucess
#services works, but slowly
#Any help is appreciate:  vinnix.bsd@gmail.com
#
# Versions of the packages:
# pkg_info | egrep -i "samba|smbldap|openldap|cyrus|smb"
#cyrus-sasl-2.1.23                             RFC 2222 SASL (Simple Authentication and Security Layer)
#dmidecode-2.10                                A tool for dumping DMI (SMBIOS) contents in human-readable
#ldap-account-manager-2.6.0                    Webfrontend for managing accounts stored in an OpenLDAP ser
#openldap-sasl-client-2.4.16                   Open source LDAP client implementation with SASL2 support
#openldap-sasl-server-2.4.16_1                 Open source LDAP server implementation
#p5-Crypt-SmbHash-0.12                         Perl module implementing lanman and nt md4 hash functions
#samba-3.3.3                                   A free SMB and CIFS client and server for UNIX
#smbldap-tools-0.9.5                           Samba-LDAP management and support tools
#
# tail -f /var/log/messages # A LOT OF THIS ISSUES:
#May 18 19:03:15 thome smbd[5489]: [2009/05/18 19:03:15,  0] lib/util_sock.c:read_socket_with_timeout(939)
#May 18 19:03:15 thome smbd[5489]: [2009/05/18 19:03:15,  0] lib/util_sock.c:get_peer_addr_internal(1676)
#May 18 19:03:15 thome smbd[5489]:   getpeername failed. Error was Socket is not connected
#May 18 19:03:15 thome smbd[5489]:   read_socket_with_timeout: client 0.0.0.0 read error = Socket is not connected.
#May 18 19:03:15 thome winbindd[5162]: [2009/05/18 19:03:15,  0] libsmb/namequery.c:saf_store(75)
#May 18 19:03:15 thome winbindd[5162]:   saf_store: refusing to store 0 length domain or servername!
#May 18 19:09:16 thome winbindd[5164]: [2009/05/18 19:09:16,  0] winbindd/idmap_ldap.c:idmap_ldap_set_mapping(1410)
#May 18 19:09:16 thome winbindd[5164]:   ldap_set_mapping_internals: Failed to add S-1-5-32-546 to 10062 mapping [gidNumber]
#May 18 19:09:16 thome winbindd[5164]: [2009/05/18 19:09:16,  0] winbindd/idmap_ldap.c:idmap_ldap_set_mapping(1412)
#May 18 19:09:16 thome winbindd[5164]:   ldap_set_mapping_internals: Error was: (NULL) (Already exists)
[global]
dos charset = UTF-8
workgroup = CORP_TRIARIUS
server string = FreeBSD PDC
security = user
passdb backend = ldapsam:ldap://127.0.0.1/
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n*passwd:*all*authentication*tokens*updated*successfully*
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
socket address = 192.168.1.1
interfaces = 192.168.1.0/26
wins support = yes
#bind interfaces only = yes
#load printers = yes
#printcap name = cups

add user script = /usr/local/sbin/smbldap-useradd -m "%u"
delete user script = /usr/local/sbin/smbldap-userdel "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
logon script = %U.bat
logon path =
domain logons = Yes
os level = 100
preferred master = Yes
domain master = Yes
dns proxy = No
ldap admin dn = cn=root,dc=corp,dc=triarius,dc=com,dc=br
ldap delete dn = Yes
ldap group suffix = ou=Group
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=corp,dc=triarius,dc=com,dc=br
ldap ssl = no
ldap user suffix = ou=People
idmap backend = ldap:ldap://127.0.0.1
idmap uid = 10000-15000
idmap gid = 10000-15000
template shell = /usr/bin/nologin
admin users = administrator, root
hosts allow = 192.168.1., 127.0.0.1
#printing = cups
#print command = lpr -P'%p' %s; rm %s
queuepause command = disable '%p'
queueresume command = enable '%p'
delete veto files = Yes
veto files = /*.aif/*.avi/*.cpl/*.mid/*.mov/*.mpa/*.mpe/*.mp3/*.mpeg/*.mpg/*.rar/*.scr/*.vbe/*.vbs/*.wav/*.wma/*.wmv/*.pif/*.bat/*.exe/

[homes]
comment = Home Directories
valid users = %S
force user = %U
read only = No
create mask = 0664
directory mask = 0775
browseable = No

[profiles]
path = /home/profiles
valid users = %U, "@Domain Admins"
force user = %U
read only = No
browseable = No

[admin$]
comment = Diretorio ROOT
path = /
valid users = @wheel
read only = No
create mask = 0664
directory mask = 0775

#[cdrom]
#comment = Drive CD-ROM
#path = /cdrom
#read list = nobody, guest, system, @wheel, @nobody
#read only = No

[netlogon]
comment = The domain logon service
path = /usr/local/etc/samba/netlogon
browseable = No
share modes = No

[disco]
comment = Diretorio publico
path = /mnt/dsk2/SAMBA
read only = No
create mask = 0777
directory mask = 0777
guest ok = No

#[print$]
#comment = Printer Drivers
#path = /usr/local/share/cups/drivers
#browseable = yes
#guest ok = yes
#guest ok = no
#read only = yes
#write list = root

#[printers]
#comment = Impressoras
#path = /var/spool/samba
#browseable = no
#public = yes
#guest ok = yes
#writable = no
#printable = yes
##printer admin = root