Samba LDAP

[global]
    interfaces = 127.0.0.0/8 lan0
    encrypt passwords = yes
    dns proxy = yes
    strict locking = no
    read raw = yes
    write raw = yes
    oplocks = yes
    max xmit = 65535
    deadtime = 15
    max log size = 10
    load printers = no
    printing = bsd
    printcap name = /dev/null
    disable spoolss = yes
    smb passwd file = /var/lib/samba/smbpasswd
    private dir = /var/lib/samba/private
    getwd cache = yes
    guest account = nobody
    map to guest = Bad Password
    obey pam restrictions = Yes
    directory name cache size = 0
    netbios name = boxy
    os level = 34
    dns proxy = no
    workgroup = WORKGROUP
    server string = FooBar storage system
    use sendfile = yes
    ea support = yes
    store dos attributes = yes
    hostname lookups = yes
    local master = yes
    security = user
    nt acl support = yes

# LDAP
    passdb backend = ldapsam:"ldap://dir.host.name"
    ldapsam:trusted = yes
    ldapsam:editposix = yes

    ldap admin dn = cn=admin,dc=foo,dc=bar
    ldap suffix = dc=foo,dc=bar
    ldap user suffix = ou=Users
    ldap group suffix = ou=Groups
    ldap idmap suffix = ou=Idmap
    ldap ssl = off
    ldap replication sleep = 1000
    ldap passwd sync = yes
    unix password sync = no

    create mask = 0666
    directory mask = 0777
    client ntlmv2 auth = yes
    dos charset = CP1251
    unix charset = UTF-8
    log level = 3
    aio read size = 4096
    aio write size = 4096
    domain logons = no
    domain master = yes
    preferred master = yes
    wins support = yes
    name resolve order = host wins bcast
    veto files = /.snap/.windows/.zfs/Thumbs.db/.DS_Store/._.DS_Store/.apdisk/
    veto oplock files  = /*.doc/*.xls/*.ppt/*.mdb/*.docx/*.xlsx/*.pptx

[FooBar]
path = /foo/bar
printable = no
comment = Foobar
writeable = yes
browseable = yes
hide dot files = no
guest ok = no
map archive = No
map readonly = no