# Определение имени домена и узла
####################################################
[global]
workgroup = GS6b
netbios name = srv
password server = localhost
keepalive = 10
wins support = true
local master = Yes
display charset = KOI8-R
dos charset = CP866
unix charset = KOI8-R
blocking locks = yes
kernel oplocks = yes
level2 oplocks = no
locking = no
oplocks = no
strict locking = no
posix locking = yes
share modes = yes
max xmit = 65535
dead time = 15
lock directory = /var/lib/samba
use sendfile = yes
max open files = 65535
defer sharing violations = yes
winbind nested groups = no
# Настройки ldapsam backend database
####################################################
passdb backend = ldapsam:ldap://ldap.adramelech.local
#passdb backend = ldapsam:ldap://127.0.0.1
username map = /etc/samba/smbusers

# Настройки системы печати
####################################################
printcap name = cups
printing = cups

# Путь к скрипту IDEALX (его коснемся позже)
####################################################
add user script = /usr/local/sbin/smbldap-useradd -m %u
delete user script = /usr/local/sbin/smbldap-userdel %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g

delete group script = /usr/local/sbin/smbldap-groupdel %g
add user to group script = /usr/local/sbin/smbldap-groupmod -m %g %u
delete user from group script = /usr/local/sbin/smbldap-groupmod -x %g %u
set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
add machine script = /usr/local/sbin/smbldap-useradd -w %u


# если вы хотите добавлять машины в домен автоматически добавьте этот скрипт:
# add machine script = /usr/local/sbin/smbldap-useradd -w -i %u
# испытано на SUSE 10.0
#
# Другие разнообразные директивы ( man smb.conf )
####################################################
obey pam restrictions = Yes
logon script = scripts\logon.bat
logon path = \\%L\Profiles\%U
logon drive = H:
logon home = \\%L\%U
domain logons = Yes
os level = 44
preferred master = Yes
domain master = Yes
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
show add printer wizard = yes

# OpenLDAP настройки определяются здесь
###################################################
ldap suffix = dc=adramelech,dc=local
ldap machine suffix = ou=Computers
ldap user suffix = ou=Users
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Users
ldap admin dn = cn=administrator,dc=adramelech,dc=local
ldap ssl = no
ldap passwd sync = Yes
idmap uid = 15000-20000
idmap gid = 15000-20000

# Задание настоек журналирования
####################################################
log level = 2
log file = /var/log/samba/%m.log

# Определение настроек сканирования вирусов
####################################################
vfs object = vscan-clamav
vscan-clamav: config-file = /etc/samba/vscan-clamav.conf

# Настройки домашних директорий
####################################################
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

# Определение принтеров
####################################################
[printers]
comment = All Printers
path = /var/spool/samba
printer admin = @"Print Operators"
read only  = Yes
guest ok = Yes
printable = Yes
browseable = No

# Драйвера для принтера
####################################################
[print$]
path = /var/lib/samba/drivers/
guest ok = No
browseable = Yes
read only = Yes
valid users = @"Print Operators"
write list = @"Print Operators"
create mask = 0664
directory mask = 0775

# Настройка службы сетевого входа (logon)
####################################################
[netlogon]
comment = NLService
path = /var/lib/samba/netlogon
guest ok = Yes

browseable = No

# Драйвера для принтера
####################################################
[print$]
path = /var/lib/samba/drivers/
guest ok = No
browseable = Yes
read only = Yes
valid users = @"Print Operators"
write list = @"Print Operators"
create mask = 0664
directory mask = 0775

# Настройка службы сетевого входа (logon)
####################################################
[netlogon]
comment = NLService
path = /var/lib/samba/netlogon
guest ok = Yes
browseable = No

# Ресурс профилей ( для переносимых профилей )
####################################################
[profiles]
comment = Roaming Profiles
path = /var/lib/samba/profiles
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
force user = %U
valid users = %U "Domain Admins"
read only = No
profile acls = Yes

# Определение разделенных ресурсов
####################################################
[share]
comment = data share
path = /opt/stuff
valid users = %U