# FreeBSD BOX - LDAP - SAMBA - SMBLDAPTOOLS - ISSUES -
#smb.conf has freaking me out!
#had loked at smb.conf(4) and google, but withou sucess
#services works, but slowly
#Any help is appreciate:  vinnix.bsd@gmail.com
#
# Versions of the packages:
# pkg_info | egrep -i "samba|smbldap|openldap|cyrus|smb"
#cyrus-sasl-2.1.23                             RFC 2222 SASL (Simple Authentication and Security Layer)
#dmidecode-2.10                                A tool for dumping DMI (SMBIOS) contents in human-readable
#ldap-account-manager-2.6.0                    Webfrontend for managing accounts stored in an OpenLDAP ser
#openldap-sasl-client-2.4.16                   Open source LDAP client implementation with SASL2 support
#openldap-sasl-server-2.4.16_1                 Open source LDAP server implementation
#p5-Crypt-SmbHash-0.12                         Perl module implementing lanman and nt md4 hash functions
#samba-3.3.3                                   A free SMB and CIFS client and server for UNIX
#smbldap-tools-0.9.5                           Samba-LDAP management and support tools

[global]
dos charset = UTF-8
workgroup = CORP_TRIARIUS
server string = FreeBSD PDC
security = user
passdb backend = ldapsam:ldap://127.0.0.1/
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n*passwd:*all*authentication*tokens*updated*successfully*
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
socket address = 192.168.1.1
interfaces = 192.168.1.0/26
wins support = yes
bind interfaces only = yes
#load printers = yes
#printcap name = cups
 
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
delete user script = /usr/local/sbin/smbldap-userdel "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
logon script = %U.bat
logon path =
domain logons = Yes
os level = 100
preferred master = Yes
domain master = Yes
dns proxy = No
ldap admin dn = cn=root,dc=corp,dc=triarius,dc=com,dc=br
ldap delete dn = Yes
ldap group suffix = ou=Group
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=corp,dc=triarius,dc=com,dc=br
ldap ssl = no
ldap user suffix = ou=People
idmap backend = ldap:ldap://127.0.0.1
idmap uid = 10000-15000
idmap gid = 10000-15000
template shell = /usr/bin/nologin
admin users = administrator, root
hosts allow = 192.168.1., 127.0.0.1
#printing = cups
#print command = lpr -P'%p' %s; rm %s
queuepause command = disable '%p'
queueresume command = enable '%p'
delete veto files = Yes
veto files = /*.aif/*.avi/*.cpl/*.mid/*.mov/*.mpa/*.mpe/*.mp3/*.mpeg/*.mpg/*.rar/*.scr/*.vbe/*.vbs/*.wav/*.wma/*.wmv/*.pif/*.bat/*.exe/
 
[homes]
comment = Home Directories
valid users = %S
force user = %U
read only = No
create mask = 0664
directory mask = 0775
browseable = No
 
#
[profiles]
#
path = /home/profiles
#
valid users = %U, "@Domain Admins"
#
force user = %U
#
read only = No
#
browseable = No
#
 
#
[admin$]
#
comment = Diretorio ROOT
#
path = /
#
valid users = @wheel
#
read only = No
#
create mask = 0664
#
directory mask = 0775
#
 
#
#[cdrom]
#
#comment = Drive CD-ROM
#
#path = /cdrom
#
#read list = nobody, guest, system, @wheel, @nobody
#
#read only = No
#
 
#
[netlogon]
#
comment = The domain logon service
#
path = /usr/local/etc/samba/netlogon
#
browseable = No
#
share modes = No
#
 
#
[disco]
#
comment = Diretorio publico
#
path = /mnt/dsk2/SAMBA
#
read only = No
#
create mask = 0777
#
directory mask = 0777
#
guest ok = No
#
 
#
#[print$]
#
#comment = Printer Drivers
#
#path = /usr/local/share/cups/drivers
#
#browseable = yes
#
#guest ok = yes
#
#guest ok = no
#
#read only = yes
#
#write list = root
#
 
#
#[printers]
#
#comment = Impressoras
#
#path = /var/spool/samba
#
#browseable = no
#
#public = yes
#
#guest ok = yes
#
#writable = no
#
#printable = yes
#
##printer admin = root