[global]
    log file = /var/log/samba/log.%m
    log level = 3
panic action = /usr/share/samba/panic-action %d

smb ports = 139 445
deadtime = 10
max protocol = NT1

    encrypt passwords = true

idmap config NT AUTHORITY : base_rid = 0
idmap config NT AUTHORITY : range = 1200000-1299999
idmap config NT AUTHORITY : backend = rid

idmap config BUILTIN : base_rid = 0
idmap config BUILTIN : range = 1000000-1099999
idmap config BUILTIN : backend = rid

idmap config MOVAVI : base_rid = 50000
idmap config MOVAVI : range = 50000-599999
idmap config MOVAVI : backend = rid
idmap config MOVAVI : default = yes

idmap config * : range = 1300000-1999999
idmap config * : backend = rid

       # Use settings from AD for login shell and home directory
       winbind nss info = rfc2307

    auth methods = winbind
    name resolve order = hosts bcast lmhosts
    case sensitive = no
    dns proxy = no
    server string = "Share Server 12Tb"
netbios name = share
map to guest = bad user
obey pam restrictions = yes
unix password sync = yes
usershare allow guests = yes
pam password change = yes

usershare path = /var/lib/samba/usershares
    password server = *
    realm = MOVAVI.SRV
    client use spnego = yes
    client signing = yes
    client ntlmv2 auth = yes
    workgroup = MOVAVI
    debug level = 2
#    security = ads
    security = domain

dos charset = 866
unix charset = UTF-8
display charset = UTF-8

    max log size = 50
    wins server = movavi.srv
    follow symlinks = yes
    winbind enum groups = yes
    winbind enum users = yes
    winbind use default domain = yes
    winbind refresh tickets = yes
    domain master = no
    local master = no
    preferred master = no
    os level = 0
    domain logons = no
    template homedir = /home/%U
    template shell = /bin/bash

    load printers = no
    show add printer wizard = no
    printcap name = /dev/null
    disable spoolss = yes

    posix locking = no
    kernel oplocks = no
    oplocks = no
    level2 oplocks = no

    veto files = /.DS_Store/._.DS_Store/._*/._.TemporaryItems/.TemporaryItems/thumbs.db
    delete veto files = yes
    hide files = /$RECYCLE.BIN/desktop.ini/lost+found/Thumbs.db/


    store dos attributes = yes
    acl compatibility = auto
    nt acl support = yes
    map acl inherit = yes

  map archive             = no
  map system              = no
  map hidden              = no
  map readonly            = no

### Guest no passwd ###
[support_uploads]
    comment = files for support
    path = /mnt/share/smb/support_uploads
    browseable = yes
    read only = no
    guest ok = yes
    create mask = 0666
    directory mask = 0777

[tmp]
    comment = share
    path = /mnt/share/smb/share
    browseable = yes
    read only = no
    guest ok = yes
    create mask = 0666
    directory mask = 0777

[arch]
    comment = build archive
    path = /mnt/share/smb/arch
    browseable = yes
    read only = no
    guest ok = yes
    create mask = 0666
    directory mask = 0777