Определение имени домена и узла
####################################################
[global]
workgroup = GS6b
netbios name = srv

# Настройки ldapsam backend database
####################################################
passdb backend = ldapsam:ldap://127.0.0.1
username map = /etc/samba/smbusers

# Настройки системы печати
####################################################
printcap name = cups
printing = cups

# Путь к скрипту IDEALX (его коснемся позже)
####################################################
add user script = /usr/local/sbin/smbldap-useradd -m %u
delete user script = /usr/local/sbin/smbldap-userdel %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g
delete group script = /usr/local/sbin/smbldap-groupdel %g
add user to group script = /usr/local/sbin/smbldap-groupmod -m %g %u
delete user from group script = /usr/local/sbin/smbldap-groupmod -x %g %u
set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
add machine script = /usr/local/sbin/smbldap-useradd -w %u


# если вы хотите добавлять машины в домен автоматически добавьте этот скрипт:
# add machine script = /usr/local/sbin/smbldap-useradd -w -i %u
# испытано на SUSE 10.0
#
# Другие разнообразные директивы ( man smb.conf )
####################################################
obey pam restrictions = Yes
logon script = scripts\logon.bat
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 44
preferred master = Yes
domain master = Yes
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
show add printer wizard = yes

# OpenLDAP настройки определяются здесь
###################################################
ldap suffix = dc=foobar,dc=tld на ldap suffix = dc=adramalech,dc=com
ldap machine suffix = ou=Computers
ldap user suffix = ou=Users
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Users
ldap admin dn = cn=admin,dc=adramelech, dc=com
ldap ssl = no
ldap passwd sync = Yes
idmap uid = 15000-20000
idmap gid = 15000-20000

# Задание настоек журналирования
####################################################
log level = 2
log file = /var/log/samba/%m.log

# Определение настроек сканирования вирусов
####################################################
vfs object = vscan-clamav
vscan-clamav: config-file = /etc/samba/vscan-clamav.conf

# Настройки домашних директорий
####################################################
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

# Определение принтеров
####################################################
[printers]
comment = All Printers
path = /var/spool/samba
printer admin = @"Print Operators" 
read only  = Yes
guest ok = Yes
printable = Yes
browseable = No

# Драйвера для принтера
####################################################
[print$]
path = /var/lib/samba/drivers/
guest ok = No
browseable = Yes
read only = Yes
valid users = @"Print Operators"
write list = @"Print Operators"
create mask = 0664
directory mask = 0775

# Настройка службы сетевого входа (logon)
####################################################
[netlogon]
comment = NLService
path = /var/lib/samba/netlogon
guest ok = Yes
browseable = No

# Ресурс профилей ( для переносимых профилей )
####################################################
[profiles]
comment = Roaming Profiles
path = /var/lib/samba/profiles
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
force user = %U
valid users = %U "Domain Admins"
read only = No
profile acls = Yes

# Определение разделенных ресурсов
####################################################
[share]
comment = data share
path = /opt/stuff
valid users = %U