smb.conf

# grep -v ^$ /etc/samba/smb.conf|grep -v ^#
[global]
workgroup = DOMISYS
netbios name = athena
server string = PDC (Samba %v)
printcap name = cups
load printers = yes
printcap cache time = 60
printing = cups
printer admin = @adm
show add printer wizard = yes
log file = /var/log/samba/log.%m
max log size = 50
log level = 10
syslog = 0
time server = yes
dos charset = 850
Unix charset = ISO8859-1
preserve case = yes
case sensitive = no
short preserve case = yes
create mask = 0640
directory mask = 0750
nt acl support = no
deadtime = 10
domain logons = yes
map to guest = bad user
guest account = nobody
security = user
encrypt passwords = yes
mangling method = hash2
#min password length = 5
smb passwd file = /etc/samba/smbpasswd
enable privileges = yes
username map = /etc/samba/smbusers
dont descend = /proc, /dev, /etc, /lib, /lost+found, /initrd, /boot
logon script = logon.bat
logon drive = H:
logon home =
logon path =
hosts allow = 10.
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
os level = 65
domain master = yes
prefered master = yes
dns proxy = no
wins support = yes
passdb backend = ldapsam:ldap://athena
ldap passwd sync = yes
ldap suffix = dc=materiel,dc=net
ldap admin dn = uid=samba,ou=DSA,dc=materiel,dc=net
# ldap ssl = tls start
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=Users
ldap delete dn = yes
add user script = /usr/sbin/smbldap-useradd -m "%u"
# delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
# delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
[homes]
comment = Répertoire personne de %U, %u
read only = no
create mask = 0644
directory mask = 0775
browseable = no
valid users = %U
[netlogon]
path = /home/netlogon
browseable = no
read only = yes
[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = no
guest ok = yes
profile acls = yes
csc policy = disable
force user = %U
valid users = %U @"Domain Admins"
[printers]
comment = Network Printers
path = /var/spool/samba
browseable = no
read only = yes
guest ok = yes
writable = no
printable = yes
create mode = 0700
print command = lpr-cups -P %p -o raw %s -r # using client side printer drivers.
lpq command = lpq -P %p
lprm command = lprm -P %p %j
use client driver = yes
[print$]
path = /var/lib/samba/printers
browseable = yes
write list = @adm root
guest ok = no
read only = yes
create mask = 0664
directory mask = 0775
# inherit permissions = yes
# Settings suitable for Winbind:
# write list = @"Domain Admins" root
# force group = +@"Domain Admins"
[doc]
path=/usr/share/doc
public=yes
writable=no
read only=no
create mask = 0750
guest ok = Yes