Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #======================= Global Settings =======================
- [global]
- unix extention = no
- ## Browsing/Identification ###
- # Change this to the workgroup/NT-domain name your Samba server will part of
- workgroup = WORKGROUP
- # server string is the equivalent of the NT Description field
- server string = %h server
- # Windows Internet Name Serving Support Section:
- # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
- # wins support = no
- # WINS Server - Tells the NMBD components of Samba to be a WINS Client
- # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
- ; wins server = w.x.y.z
- # This will prevent nmbd to search for NetBIOS names through DNS.
- dns proxy = no
- # What naming service and in what order should we use to resolve host names
- # to IP addresses
- ; name resolve order = lmhosts host wins bcast
- #### Networking ####
- # The specific set of interfaces / networks to bind to
- # This can be either the interface name or an IP address/netmask;
- # interface names are normally preferred
- ; interfaces = 127.0.0.0/8 eth0
- # Only bind to the named interfaces and/or networks; you must use the
- # 'interfaces' option above to use this.
- # It is recommended that you enable this feature if your Samba machine is
- # not protected by a firewall or is a firewall itself. However, this
- # option cannot handle dynamic or non-broadcast interfaces correctly.
- ; bind interfaces only = yes
- #### Debugging/Accounting ####
- # This tells Samba to use a separate log file for each machine
- # that connects
- log file = /var/log/samba/log.%m
- # Cap the size of the individual log files (in KiB).
- max log size = 1000
- # If you want Samba to only log through syslog then set the following
- # parameter to 'yes'.
- # syslog only = no
- # We want Samba to log a minimum amount of information to syslog. Everything
- # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
- # through syslog you should set the following parameter to something higher.
- syslog = 0
- # Do something sensible when Samba crashes: mail the admin a backtrace
- panic action = /usr/share/samba/panic-action %d
- ####### Authentication #######
- # "security = user" is always a good idea. This will require a Unix account
- # in this server for every user accessing the server. See
- # /usr/share/doc/samba-doc/htmldocs/Samba3-HOWTO/ServerType.html
- # in the samba-doc package for details.
- security = user
- # You may wish to use password encryption. See the section on
- # 'encrypt passwords' in the smb.conf(5) manpage before enabling.
- encrypt passwords = true
- # If you are using encrypted passwords, Samba will need to know what
- # password database type you are using.
- passdb backend = tdbsam
- obey pam restrictions = yes
- # This boolean parameter controls whether Samba attempts to sync the Unix
- # password with the SMB password when the encrypted SMB password in the
- # passdb is changed.
- unix password sync = yes
- # For Unix password sync to work on a Debian GNU/Linux system, the following
- # parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
- # sending the correct chat script for the passwd program in Debian Sarge).
- passwd program = /usr/bin/passwd %u
- passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
- # This boolean controls whether PAM will be used for password changes
- # when requested by an SMB client instead of the program listed in
- # 'passwd program'. The default is 'no'.
- pam password change = yes
- # This option controls how unsuccessful authentication attempts are mapped
- # to anonymous connections
- map to guest = bad user
- # Allow users who've been granted usershare privileges to create
- # public shares, not just authenticated ones
- usershare allow guests = yes
- #======================= Share Definitions =======================
- [home]
- comment = Home Directories
- browseable = yes
- # By default, the home directories are exported read-only. Change the
- # next parameter to 'no' if you want to be able to write to them.
- read only = no
- # File creation mask is set to 0700 for security reasons. If you want to
- # create files with group=rw permissions, set next parameter to 0775.
- create mask = 0700
- # Directory creation mask is set to 0700 for security reasons. If you want to
- # create dirs. with group=rw permissions, set next parameter to 0775.
- directory mask = 0700
- # By default, \\server\username shares can be connected to by anyone
- # with access to the samba server.
- # The following parameter makes sure that only "username" can connect
- # to \\server\username
- # This might need tweaking when using external authentication schemes
- valid users = %S
- [backup]
- comment = backup folder for engraved files
- path = /media/main_backup/backup/
- valid users=@smbusers
- force group= smbusers
- create mask =0770
- directory mask = 0771
- writeable = yes
- browsable = yes
- [backup2]
- comment = sources and other files
- path = /media/essential_backup/
- valid users=@smbusers
- force group= smbusers
- create mask =0770
- directory mask = 0771
- writeable = yes
- browsable = yes
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement