[global]
workgroup = TESTO
netbios name = FBSD
server string = File Server
security = user
load printers = no
log file = /var/log/samba/log.%m
max log size = 50
interfaces = 192.168.2.1
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no 
time server = yes

log level = 3

# domain
local master = yes
os level = 65
domain master = yes 
preferred master = yes
domain logons = yes
wins support = yes

# ldap
passdb backend = ldapsam:ldap://127.0.0.1/
ldap admin dn = cn=admin,dc=lero,dc=org
ldap suffix = dc=lero,dc=org
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers

add user script = /usr/local/sbin/smbldap-useradd -m %u
delete user script = /usr/local/sbin/smbldap-userdel %u
add machine script = /usr/local/sbin/smbldap-useradd -t 0 -w %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g
add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g
delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u %g
set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u

# shares
[homes]
comment = Home Directories
browseable = no
writable = yes

[netlogon]
comment = Network Logon Service
path = /home/netlogon
guest ok = yes
writable = no
share modes = no

[profiles] 
comment = Network Profiles Share 
path = /usr/home/profiles 
read only = No 
store dos attributes = Yes 
create mask = 0600 
directory mask = 0700 
browseable = no 
guest ok = no 
printable = no 
hide files = /desktop.ini/outlook*.lnk/*Briefcase*/

lero# ls -l /home/
total 10
drwxr-xr-x  3 alemao    alemao        512 Sep 11 19:27 alemao
drwx------  2 barbaris  Domain Users  512 Sep 11 23:39 barbaris
drwx------  2 lero      Domain Users  512 Sep 11 20:11 lero
drwxr-xrwx  2 root      wheel         512 Sep 11 23:13 netlogon
drwxr-xrwx  2 root      wheel         512 Sep 11 23:12 profiles
lero# 

lrwxrwxrwx   1 root  wheel        8 Sep 11 16:23 home -> usr/home