[global]
netbios name          = Uriel
workgroup             = class
server string         = Windows NT PDC

hosts allow           = 192.168.0.0/24  127.0.0.0/8
security              = user
encrypt passwords     = yes
socket options        = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
interfaces            = lo eth0
bind interfaces only  = yes

local master          = yes
os level              = 65
domain master         = yes
preferred master      = yes

null passwords        = no
hide unreadable       = yes
hide dot files        = yes

domain logons         = yes
logon script          = login.bat
logon path            = \\%L\profiles\%U
logon drive           = H:
logon home            = \\%L\%U\.9xprofile

wins support          = yes
name resolve order    = wins lmhosts hosts bcast
dns proxy             = no

time server           = yes
log file              = /var/log/samba/log.%m
####log level             = 3
####max log size          = 50
smb passwd file       = /etc/samba/private/smbpasswd

unix charset          = ISO8859-1

passdb backend        = ldapsam:ldaps://127.0.0.1/
ldap passwd sync      = yes
ldap suffix           = dc=mydom,dc=com
ldap admin dn         = cn=Manager,dc=mydom,dc=com
ldap ssl              = start tls
ldap group suffix     = ou=Group
ldap user suffix      = ou=People
ldap machine suffix   = ou=Hosts
ldap idmap suffix     = ou=People

add user script      	  = /usr/sbin/useradd -m "%u"
delete user script   	  = /usr/sbin/userdel -r "%u"
add group script     	  = /usr/sbin/groupadd %g
delete group script    	  = /usr/sbin/groupdel %g
add user to group script  = /usr/sbin/usermod -G %g %u
add machine script        = /usr/sbin/useradd -s /bin/false -d /dev/bull %u


[netlogon]
path                 = /var/lib/samba/netlogon
public               = no
writeable            = no
browseable           = no

[profiles]
path                 = /var/lib/samba/profiles
browseable           = no
writeable            = yes
default case         = lower
preserve case        = no
short preserve case  = no
case sensitive       = no
hide files           = /desktop.ini/ntuser.ini/NTUSER.*/
write list           = @smbusers @root
create mode          = 0600
directory mode       = 0700

[homes]
path                 = /home/%U
browseable           = no
valid users          = %S
writeable            = yes
guest ok             = no
inherit permissions  = yes

[public]
path                 = /public
writeable            = no
browseable           = yes
write list           = @users