[global]
        netbios name = schpdc
        comment = FreeBSD 6.1 Samba 3 PDC
        encrypt passwords = yes
        workgroup = TSCH
        security = user
        dns proxy = no
        invalid users = bin daemon sys man postfix mail ftp
        admin users = @wheel
#       domain admin group = @wheel
#       domain admin users = root
#       wins support = yes
        printing = cups
#       passdb backend = ldapsam:ldap://localhost/
        passdb backend = ldapsam
        ldapsam:trusted = yes
        ldapsam:editposix = yes
#       username map = /etc/samba/smbusers
        os level = 255
        preferred master = auto
        show add printer wizard = yes
        local master = yes
        domain logons = yes
        domain master = yes
        logon path = \\%L\Profiles\%U
        logon drive = H:
        logon home = \\%L\Users\%U
#       logon script =
## logging options
        log level = 3
        log file = /var/log/samba/log.%m
        max log size = 1000
        syslog = 1
## idealx scripts for user, group, and machine account mgmt
#       add user script = /usr/local/sbin/smbldap-useradd -am "%u"
#       delete user script = /usr/local/sbin/smbldap-userdel "%u"
#       add group script = /usr/local/sbin/smbldap-groupadd "%g"
#       delete group script = /usr/local/sbin/smbldap-groupdel "%g"
#       add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
#       delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
#       set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
#       add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
## password sync
#       passwd program = /usr/local/sbin/smbldap-passwd -o %u
#       passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*
#       unix password sync = yes
## OpenLDAP stuff here
        ldap suffix = dc=tsch,dc=lan
        ldap user suffix = ou=users
        ldap group suffix = ou=groups
        ldap machine suffix = ou=computers
        ldap idmap suffix = ou=idmap
        ldap admin dn = cn=admin,dc=thesurgerycenter,dc=com
        ldap passwd sync = yes
        ldap ssl = no
        ldap delete dn = yes
## idmap
        idmap backend = ldap:"ldap://localhost"
        idmap uid = 95000-150000
        idmap gid = 95000-150000
## defining the network logon service
[netlogon]
        comment = Network Logon Service
        path = /usr/local/samba/netlogon
        read only = yes
        #write list
        valid users = root @smbusers
## Defining profile shares for roaming profiles
[Profiles]
        comment = Roaming profile shares
        path = /usr/local/samba/profiles
        writeable = yes
        create mask = 0600
        directory mask = 0700
        browsable = yes
        guest ok = yes
## defining home directories
[Users]
        comment = Home directory shares
        path = /usr/local/samba/users
        writeable = yes
        create mask = 0600
        directory mask = 0700
        browseable = yes
        guest ok = no
[printers]
        comment = All printers
        path = /var/spool/samba
        browseable = no
# Set public = yes to allow user 'guest account' to print
        guest ok = no
        writeable = no
        printable = yes