# Global parameters
[global]
      workgroup = EXAMPLE
      server string = Example NAS
      netbios name = kentro
      hosts allow = 192.168.0.0/16 127.0.0.0/8 10.0.0.0/16
      interfaces = igb* lo
      bind interfaces only = yes

# passwd backend
      encrypt passwords = yes
      passdb backend   = ldapsam:ldap://kentro.internal.example.com/
      enable privileges = yes
      pam password change= Yes
      passwd program = /usr/bin/passwd %u
      passwd chat = *New*password* %nn *Retype*new*password* %nn * passwd:*all*authentication*tokens*updated*successfully*
      unix password sync = Yes

# Log options
      log level = 1
      log file = /var/log/samba/%m
      max log size = 50
      syslog = 0

# Name resolution
      name resolve order = wins bcast host

# misc
      timeserver = Yes
      socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
      use sendfile = yes
      veto files = /*.eml/*.nws/*.{*}/
      veto oplock files = /*.doc/*.xls/*.mdb/
      deadtime         = 120

# Dos-Attribute
      map hidden = No
      map system = No
      map archive = No
      map read only = No
      store dos attributes = Yes

# printers - configured to use CUPS and automatically load them
      load printers = Yes
      printcap name = CUPS
      printing = cups
      cups options = Raw
      show add printer wizard = No

# scripts invoked by samba
      add user script               = /usr/local/sbin/smbldap-useradd -m '%u'
      delete user script            = /usr/local/sbin/smbldap-userdel '%u'
      add group script              = /usr/local/sbin/smbldap-groupadd -p '%g'
      delete group script           = /usr/local/sbin/smbldap-groupdel '%g'
      add user to group script      = /usr/local/sbin/smbldap-groupmod -m '%u' '%g'
      delete user from group script = /usr/local/sbin/smbldap-groupmod -x '%u' '%g'
      set primary group script      = /usr/local/sbin/smbldap-usermod -g '%g' '%u'
      add machine script            = /usr/local/sbin/smbldap-useradd -w '%m'

# LDAP Configuration
      ldap delete dn                = Yes
      ldap ssl                      = off
      ldap passwd sync              = Yes
      ldap suffix                   = dc=example,dc=com
      ldap machine suffix           = ou=Computers
      ldap user suffix              = ou=People
      ldap group suffix             = ou=Groups
      ldap idmap suffix             = ou=Idmap
      ldap admin dn                 = cn=Manager,dc=example,dc=com
      idmap backend                 = ldap:ldap://kentro.internal.example.com
      idmap uid                     = 10000-50000
      idmap gid                     = 10000-50000

# logon options
      logon script = logon.bat
      logon path = \%Lprofiles%u
      logon path =
      logon home = \%L%U
      logon drive = H:

# setting up as domain controller
      username map = /mnt/storage/samba/usermap
      preferred master = Yes
      wins support = Yes
      domain logons = Yes
      domain master = Yes
      local master = Yes
      os level = 64
      map acl inherit = Yes
      unix charset = UTF8

#============================ Share Definitions ==============================

[netlogon]
      comment = Network Logon Service
      path = /mnt/storage/samba/netlogon
      guest ok = yes
      locking = no

[homes]
      comment = Home Directories
      valid users = %S
      read only = No
      browseable = No

[Profiles]
      comment = Network Profiles Service
      path = /mnt/storage/samba/profiles
      read only = No
      profile acls = yes
      hide files = /desktop.ini/ntuser.ini/NTUSER.*/
      profile acls = Yes


[printers]
      comment = All Printers
      path = /var/spool/samba
      browseable = No
      guest ok = Yes
      printable = Yes
      use client driver = Yes
      default devmode = Yes

[print$]
      comment = Printer Drivers
      path = /mnt/storage/samba/printer-drivers
      browseable = yes
      guest ok = no
      read only = yes
      write list = root

[pandora]
      comment = Data Directory
      path = /mnt/storage/pandora
      write list = @example
      read only = No
      create mask = 0777
      directory mask = 0777