[global]
unix password sync = Yes
# General
netbios name = Gateway
workgroup = CLEARSYSTEM
server string = MyServer
security = user
server max protocol = NT1
ntlm auth = yes

# Logging
log level = 1
log file = /var/log/samba/%L-%m
max log size = 0
utmp = Yes

# Network
bind interfaces only = No
interfaces = lo

# Printing
printcap name = /etc/printcap
load printers = Yes

# Security settings
guest account = guest
#restrict anonymous = 2

# WINS
wins support = Yes
wins server =

# PDC/BDC
domain logons = Yes
add machine script = /usr/sbin/samba-add-machine "%u"
logon drive = U:
logon script = logon.cmd
logon path =
logon home = \\%L\%U

# Winbind
idmap config * : backend = ldap
idmap config * : range = 20000000-29999999
winbind enum users = Yes
winbind enum groups = Yes
winbind expand groups = 1
winbind offline logon = Yes
winbind use default domain = true
winbind separator = +
template homedir = /home/%U
template shell = /sbin/nologin

# Other
preferred master = Yes
domain master = Yes
passwd program = /usr/sbin/userpasswd %u
passwd chat = *password:* %n\n *password:* %n\n *successfully.*
passwd chat timeout = 10
username map = /etc/samba/smbusers
wide links = No
allow trusted domains = Yes

# LDAP settings
include = /etc/samba/smb.ldap.conf

# Winbind LDAP settings
include = /etc/samba/smb.winbind.conf

#============================ Share Definitions ==============================

# Flexshare
# include = /etc/samba/flexshare.conf

[homes]
        comment = Home Directories
        path = /home/%U
        valid users = %D\%S, %D+%S, %S
        read only = No
        browseable = No
        available = Yes

[printers]
        comment = Print Spool
        path = /var/spool/samba
        printing = cups
        cups options = raw
        use client driver = Yes
        printable = Yes
        read only = No
        browseable = No
        available = No

[print$]
        comment = Printer Drivers
        path = /var/samba/drivers
        read only = No
        browseable = No
        available = No

[netlogon]
        comment = Network Logon Service
        path = /var/samba/netlogon
        read only = No
        locking = No
        browseable = No
        available = Yes

[profiles]
        comment = Profile Share
        path = /var/samba/profiles
        read only = No
        profile acls = Yes
        browseable = No
        available = No
        force group = domain_users
        force directory mode = 02775