[global] workgroup = CAPTUS server string = "nas server" netbios name = head22 ; wins support = no ; wins server = w.x.y.z dns proxy = no os level = 128 ; name resolve order = lmhosts host wins bcast interfaces = eth1 bind interfaces only = true log file = /var/log/samba/log.%m max log size = 1000 ; syslog only = no syslog = 0 security = user encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes invalid users = root ; unix password sync = no passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* . ; pam password change = no ; domain logons = yes ; logon path = \\%N\profiles\%U ; logon path = \\%N\%U\profile ; logon drive = H: ; logon home = \\%N\%U ; logon script = logon.cmd ; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u ; load printers = yes ; printing = bsd ; printcap name = /etc/printcap ; printing = cups ; printcap name = cups ; printer admin = @ntadmin ; include = /home/samba/etc/smb.conf.%m socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ; message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' & ; domain master = auto ; idmap uid = 10000-20000 ; idmap gid = 10000-20000 ; template shell = /bin/bash ; ; The following was the default behaviour in sarge ; but samba upstream reverted the default because it might induce ; performance issues in large organizations ; See #368251 for some of the consequences of *not* having ; this setting and smb.conf(5) for all details ; ; winbind enum groups = yes ; winbind enum users = yes [homes] comment = Home Directories browseable = no writable = yes create mask = 0700 directory mask = 0700 valid users = %S ;[netlogon] ; comment = Network Logon Service ; path = /home/samba/netlogon ; guest ok = yes ; writable = no ; share modes = no ;[profiles] ; comment = Users profiles ; path = /home/samba/profiles ; guest ok = no ; browseable = no ; create mask = 0600 ; directory mask = 0700 ; write list = root, @ntadmin ;[cdrom] ; comment = Samba server's CD-ROM ; writable = no ; locking = no ; path = /cdrom ; public = yes ; preexec = /bin/mount /cdrom ; postexec = /bin/umount /cdrom [reditelna] comment = "Formulare" path = /home/public browseable = yes writeable = yes create mask = 0755 directory mask = 0755 [prace] comment = "Pracovni veci pro vsechny" path = /home/nastenka browseable = yes writeable = yes create mask = 0777 directory mask = 0777