daily pastebin goal
50%
SHARE
TWEET

Untitled

a guest Mar 17th, 2018 251 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #
  2. # Sample configuration file for the Samba suite for Debian GNU/Linux.
  3. #
  4. #
  5. # This is the main Samba configuration file. You should read the
  6. # smb.conf(5) manual page in order to understand the options listed
  7. # here. Samba has a huge number of configurable options most of which
  8. # are not shown in this example
  9. #
  10. # Some options that are often worth tuning have been included as
  11. # commented-out examples in this file.
  12. #  - When such options are commented with ";", the proposed setting
  13. #    differs from the default Samba behaviour
  14. #  - When commented with "#", the proposed setting is the default
  15. #    behaviour of Samba but the option is considered important
  16. #    enough to be mentioned here
  17. #
  18. # NOTE: Whenever you modify this file you should run the command
  19. # "testparm" to check that you have not made any basic syntactic
  20. # errors.
  21.  
  22. #======================= Global Settings =======================
  23.  
  24. [global]
  25.  
  26. ## Browsing/Identification ###
  27.  
  28. # Change this to the workgroup/NT-domain name your Samba server will part of
  29.    workgroup = akustik
  30.  
  31. # server string is the equivalent of the NT Description field
  32.     server string = %h server (Samba, Ubuntu)
  33.  
  34. # Windows Internet Name Serving Support Section:
  35. # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
  36. #   wins support = no
  37.  
  38. # WINS Server - Tells the NMBD components of Samba to be a WINS Client
  39. # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
  40. ;   wins server = w.x.y.z
  41.  
  42. # This will prevent nmbd to search for NetBIOS names through DNS.
  43.    dns proxy = no
  44.  
  45. #### Networking ####
  46.  
  47. # The specific set of interfaces / networks to bind to
  48. # This can be either the interface name or an IP address/netmask;
  49. # interface names are normally preferred
  50. ;   interfaces = 127.0.0.0/8 eth0
  51.  
  52. # Only bind to the named interfaces and/or networks; you must use the
  53. # 'interfaces' option above to use this.
  54. # It is recommended that you enable this feature if your Samba machine is
  55. # not protected by a firewall or is a firewall itself.  However, this
  56. # option cannot handle dynamic or non-broadcast interfaces correctly.
  57. ;   bind interfaces only = yes
  58.  
  59.  
  60.  
  61. #### Debugging/Accounting ####
  62.  
  63. # This tells Samba to use a separate log file for each machine
  64. # that connects
  65.    log file = /var/log/samba/log.%m
  66.  
  67. # Cap the size of the individual log files (in KiB).
  68.    max log size = 1000
  69.  
  70. # If you want Samba to only log through syslog then set the following
  71. # parameter to 'yes'.
  72. #   syslog only = no
  73.  
  74. # We want Samba to log a minimum amount of information to syslog. Everything
  75. # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
  76. # through syslog you should set the following parameter to something higher.
  77.    syslog = 0
  78.  
  79. # Do something sensible when Samba crashes: mail the admin a backtrace
  80.    panic action = /usr/share/samba/panic-action %d
  81.  
  82.  
  83. ####### Authentication #######
  84.  
  85. # Server role. Defines in which mode Samba will operate. Possible
  86. # values are "standalone server", "member server", "classic primary
  87. # domain controller", "classic backup domain controller", "active
  88. # directory domain controller".
  89. #
  90. # Most people will want "standalone sever" or "member server".
  91. # Running as "active directory domain controller" will require first
  92. # running "samba-tool domain provision" to wipe databases and create a
  93. # new domain.
  94.    server role = standalone server
  95.  
  96. # If you are using encrypted passwords, Samba will need to know what
  97. # password database type you are using.  
  98.    passdb backend = tdbsam
  99.  
  100.    obey pam restrictions = yes
  101.  
  102. # This boolean parameter controls whether Samba attempts to sync the Unix
  103. # password with the SMB password when the encrypted SMB password in the
  104. # passdb is changed.
  105.    unix password sync = yes
  106.  
  107. # For Unix password sync to work on a Debian GNU/Linux system, the following
  108. # parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
  109. # sending the correct chat script for the passwd program in Debian Sarge).
  110.    passwd program = /usr/bin/passwd %u
  111.    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
  112.  
  113. # This boolean controls whether PAM will be used for password changes
  114. # when requested by an SMB client instead of the program listed in
  115. # 'passwd program'. The default is 'no'.
  116.    pam password change = yes
  117.  
  118. # This option controls how unsuccessful authentication attempts are mapped
  119. # to anonymous connections
  120.    map to guest = bad user
  121.  
  122. ########## Domains ###########
  123.  
  124. #
  125. # The following settings only takes effect if 'server role = primary
  126. # classic domain controller', 'server role = backup domain controller'
  127. # or 'domain logons' is set
  128. #
  129.  
  130. # It specifies the location of the user's
  131. # profile directory from the client point of view) The following
  132. # required a [profiles] share to be setup on the samba server (see
  133. # below)
  134. ;   logon path = \\%N\profiles\%U
  135. # Another common choice is storing the profile in the user's home directory
  136. # (this is Samba's default)
  137. #   logon path = \\%N\%U\profile
  138.  
  139. # The following setting only takes effect if 'domain logons' is set
  140. # It specifies the location of a user's home directory (from the client
  141. # point of view)
  142. ;   logon drive = H:
  143. #   logon home = \\%N\%U
  144.  
  145. # The following setting only takes effect if 'domain logons' is set
  146. # It specifies the script to run during logon. The script must be stored
  147. # in the [netlogon] share
  148. # NOTE: Must be store in 'DOS' file format convention
  149. ;   logon script = logon.cmd
  150.  
  151. # This allows Unix users to be created on the domain controller via the SAMR
  152. # RPC pipe.  The example command creates a user account with a disabled Unix
  153. # password; please adapt to your needs
  154. ; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
  155.  
  156. # This allows machine accounts to be created on the domain controller via the
  157. # SAMR RPC pipe.  
  158. # The following assumes a "machines" group exists on the system
  159. ; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u
  160.  
  161. # This allows Unix groups to be created on the domain controller via the SAMR
  162. # RPC pipe.  
  163. ; add group script = /usr/sbin/addgroup --force-badname %g
  164.  
  165. ############ Misc ############
  166.  
  167. # Using the following line enables you to customise your configuration
  168. # on a per machine basis. The %m gets replaced with the netbios name
  169. # of the machine that is connecting
  170. ;   include = /home/samba/etc/smb.conf.%m
  171.  
  172. # Some defaults for winbind (make sure you're not using the ranges
  173. # for something else.)
  174. ;   idmap uid = 10000-20000
  175. ;   idmap gid = 10000-20000
  176. ;   template shell = /bin/bash
  177.  
  178. # Setup usershare options to enable non-root users to share folders
  179. # with the net usershare command.
  180.  
  181. # Maximum number of usershare. 0 (default) means that usershare is disabled.
  182. ;   usershare max shares = 100
  183.  
  184. # Allow users who've been granted usershare privileges to create
  185. # public shares, not just authenticated ones
  186.    usershare allow guests = yes
  187.  
  188. #======================= Share Definitions =======================
  189.  
  190. # Un-comment the following (and tweak the other settings below to suit)
  191. # to enable the default home directory shares. This will share each
  192. # user's home directory as \\server\username
  193. ;[homes]
  194. ;   comment = Home Directories
  195. ;   browseable = no
  196.  
  197. # By default, the home directories are exported read-only. Change the
  198. # next parameter to 'no' if you want to be able to write to them.
  199. ;   read only = yes
  200.  
  201. # File creation mask is set to 0700 for security reasons. If you want to
  202. # create files with group=rw permissions, set next parameter to 0775.
  203. ;   create mask = 0700
  204.  
  205. # Directory creation mask is set to 0700 for security reasons. If you want to
  206. # create dirs. with group=rw permissions, set next parameter to 0775.
  207. ;   directory mask = 0700
  208.  
  209. # By default, \\server\username shares can be connected to by anyone
  210. # with access to the samba server.
  211. # Un-comment the following parameter to make sure that only "username"
  212. # can connect to \\server\username
  213. # This might need tweaking when using external authentication schemes
  214. ;   valid users = %S
  215.  
  216. # Un-comment the following and create the netlogon directory for Domain Logons
  217. # (you need to configure Samba to act as a domain controller too.)
  218. ;[netlogon]
  219. ;   comment = Network Logon Service
  220. ;   path = /home/samba/netlogon
  221. ;   guest ok = yes
  222. ;   read only = yes
  223.  
  224. # Un-comment the following and create the profiles directory to store
  225. # users profiles (see the "logon path" option above)
  226. # (you need to configure Samba to act as a domain controller too.)
  227. # The path below should be writable by all users so that their
  228. # profile directory may be created the first time they log on
  229. ;[profiles]
  230. ;   comment = Users profiles
  231. ;   path = /home/samba/profiles
  232. ;   guest ok = no
  233. ;   browseable = no
  234. ;   create mask = 0600
  235. ;   directory mask = 0700
  236.  
  237. [printers]
  238.    comment = All Printers
  239.    browseable = no
  240.    path = /var/spool/samba
  241.    printable = yes
  242.    guest ok = no
  243.    read only = yes
  244.    create mask = 0700
  245.  
  246. # Windows clients look for this share name as a source of downloadable
  247. # printer drivers
  248. [print$]
  249.    comment = Printer Drivers
  250.    path = /var/lib/samba/printers
  251.    browseable = yes
  252.    read only = yes
  253.    guest ok = no
  254. # Uncomment to allow remote administration of Windows print drivers.
  255. # You may need to replace 'lpadmin' with the name of the group your
  256. # admin users are members of.
  257. # Please note that you also need to set appropriate Unix permissions
  258. # to the drivers directory for these users to have write rights in it
  259. ;   write list = root, @lpadmin
  260.  
  261. # # Sample configuration file for the Samba suite for Debian GNU/Linux.  ##
  262. # This is the main Samba configuration file. You should read the
  263. # smb.conf(5) manual page in order to understand the options listed
  264. # here. Samba has a huge number of configurable options most of which
  265. # are not shown in this example
  266. #
  267. # Some options that are often worth tuning have been included as
  268. # commented-out examples in this file.
  269. #  - When such options are commented with ";", the proposed setting
  270. #    differs from the default Samba behaviour
  271. #  - When commented with "#", the proposed setting is the default
  272. #    behaviour of Samba but the option is considered important
  273. #    enough to be mentioned here
  274. #
  275. # NOTE: Whenever you modify this file you should run the command
  276. # "testparm" to check that you have not made any basic syntactic
  277. # errors.
  278.  
  279. #======================= Global Settings =======================
  280.  
  281. [global]
  282.  
  283. ## Browsing/Identification ###
  284.  
  285. # Change this to the workgroup/NT-domain name your Samba server will part of
  286.    workgroup = akustik
  287.  
  288. # server string is the equivalent of the NT Description field
  289.    server string = %h server (Samba, Ubuntu)
  290.  
  291. # Windows Internet Name Serving Support Section:
  292. # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
  293.    wins support = yes
  294.  
  295. # WINS Server - Tells the NMBD components of Samba to be a WINS Client
  296. # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
  297. ;   wins server = w.x.y.z
  298.  
  299. # This will prevent nmbd to search for NetBIOS names through DNS.
  300.    dns proxy = no
  301.  
  302. #### Networking ####
  303.  
  304. # The specific set of interfaces / networks to bind to
  305. # This can be either the interface name or an IP address/netmask;
  306. # interface names are normally preferred
  307. ;   interfaces = 127.0.0.0/8 eth0
  308.  
  309. # Only bind to the named interfaces and/or networks; you must use the
  310. # 'interfaces' option above to use this.
  311. # It is recommended that you enable this feature if your Samba machine is
  312. # not protected by a firewall or is a firewall itself.  However, this
  313. # option cannot handle dynamic or non-broadcast interfaces correctly.
  314. ;   bind interfaces only = yes
  315.  
  316.  
  317.  
  318. #### Debugging/Accounting ####
  319.  
  320. # This tells Samba to use a separate log file for each machine
  321. # that connects
  322.    log file = /var/log/samba/log.%m
  323.  
  324. # Cap the size of the individual log files (in KiB).
  325.    max log size = 1000
  326.  
  327. # If you want Samba to only log through syslog then set the following
  328. # parameter to 'yes'.
  329. #   syslog only = no
  330.  
  331. # We want Samba to log a minimum amount of information to syslog. Everything
  332. # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
  333. # through syslog you should set the following parameter to something higher.
  334.    syslog = 0
  335.  
  336. # Do something sensible when Samba crashes: mail the admin a backtrace
  337.    panic action = /usr/share/samba/panic-action %d
  338.  
  339.  
  340. ####### Authentication #######
  341.  
  342. # Server role. Defines in which mode Samba will operate. Possible
  343. # values are "standalone server", "member server", "classic primary
  344. # domain controller", "classic backup domain controller", "active
  345. # directory domain controller".
  346. #
  347. # Most people will want "standalone sever" or "member server".
  348. # Running as "active directory domain controller" will require first
  349. # running "samba-tool domain provision" to wipe databases and create a
  350. # new domain.
  351.    server role = standalone server
  352.  
  353. # If you are using encrypted passwords, Samba will need to know what
  354. # password database type you are using.  
  355.    passdb backend = tdbsam
  356.  
  357.    obey pam restrictions = yes
  358.  
  359. # This boolean parameter controls whether Samba attempts to sync the Unix
  360. # password with the SMB password when the encrypted SMB password in the
  361. # passdb is changed.
  362.    unix password sync = yes
  363.  
  364. # For Unix password sync to work on a Debian GNU/Linux system, the following
  365. # parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
  366. # sending the correct chat script for the passwd program in Debian Sarge).
  367.    passwd program = /usr/bin/passwd %u
  368.    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
  369.  
  370. # This boolean controls whether PAM will be used for password changes
  371. # when requested by an SMB client instead of the program listed in
  372. # 'passwd program'. The default is 'no'.
  373.    pam password change = yes
  374.  
  375. # This option controls how unsuccessful authentication attempts are mapped
  376. # to anonymous connections
  377.    map to guest = bad user
  378.  
  379. ########## Domains ###########
  380.  
  381. #
  382. # The following settings only takes effect if 'server role = primary
  383. # classic domain controller', 'server role = backup domain controller'
  384. # or 'domain logons' is set
  385. #
  386.  
  387. # It specifies the location of the user's
  388. # profile directory from the client point of view) The following
  389. # required a [profiles] share to be setup on the samba server (see
  390. # below)
  391. ;   logon path = \\%N\profiles\%U
  392. # Another common choice is storing the profile in the user's home directory
  393. # (this is Samba's default)
  394. #   logon path = \\%N\%U\profile
  395.  
  396. # The following setting only takes effect if 'domain logons' is set
  397. # It specifies the location of a user's home directory (from the client
  398. # point of view)
  399. ;   logon drive = H:
  400. #   logon home = \\%N\%U
  401.  
  402. # The following setting only takes effect if 'domain logons' is set
  403. # It specifies the script to run during logon. The script must be stored
  404. # in the [netlogon] share
  405. # NOTE: Must be store in 'DOS' file format convention
  406. ;   logon script = logon.cmd
  407.  
  408. # This allows Unix users to be created on the domain controller via the SAMR
  409. # RPC pipe.  The example command creates a user account with a disabled Unix
  410. # password; please adapt to your needs
  411. ; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
  412.  
  413. # This allows machine accounts to be created on the domain controller via the
  414. # SAMR RPC pipe.  
  415. # The following assumes a "machines" group exists on the system
  416. ; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u
  417.  
  418. # This allows Unix groups to be created on the domain controller via the SAMR
  419. # RPC pipe.  
  420. ; add group script = /usr/sbin/addgroup --force-badname %g
  421.  
  422. ############ Misc ############
  423.  
  424. # Using the following line enables you to customise your configuration
  425. # on a per machine basis. The %m gets replaced with the netbios name
  426. # of the machine that is connecting
  427. ;   include = /home/samba/etc/smb.conf.%m
  428.  
  429. # Some defaults for winbind (make sure you're not using the ranges
  430. # for something else.)
  431. ;   idmap uid = 10000-20000
  432. ;   idmap gid = 10000-20000
  433. ;   template shell = /bin/bash
  434.  
  435. # Setup usershare options to enable non-root users to share folders
  436. # with the net usershare command.
  437.  
  438. # Maximum number of usershare. 0 (default) means that usershare is disabled.
  439. ;   usershare max shares = 100
  440.  
  441. # Allow users who've been granted usershare privileges to create
  442. # public shares, not just authenticated ones
  443.    usershare allow guests = yes
  444.  
  445. #======================= Share Definitions =======================
  446.  
  447. # Un-comment the following (and tweak the other settings below to suit)
  448. # to enable the default home directory shares. This will share each
  449. # user's home directory as \\server\username
  450. ;[homes]
  451. ;   comment = Home Directories
  452. ;   browseable = no
  453.  
  454. # By default, the home directories are exported read-only. Change the
  455. # next parameter to 'no' if you want to be able to write to them.
  456. ;   read only = yes
  457.  
  458. # File creation mask is set to 0700 for security reasons. If you want to
  459. # create files with group=rw permissions, set next parameter to 0775.
  460. ;   create mask = 0700
  461.  
  462. # Directory creation mask is set to 0700 for security reasons. If you want to
  463. # create dirs. with group=rw permissions, set next parameter to 0775.
  464. ;   directory mask = 0700
  465.  
  466. # By default, \\server\username shares can be connected to by anyone
  467. # with access to the samba server.
  468. # Un-comment the following parameter to make sure that only "username"
  469. # can connect to \\server\username
  470. # This might need tweaking when using external authentication schemes
  471. ;   valid users = %S
  472.  
  473. # Un-comment the following and create the netlogon directory for Domain Logons
  474. # (you need to configure Samba to act as a domain controller too.)
  475. ;[netlogon]
  476. ;   comment = Network Logon Service
  477. ;   path = /home/samba/netlogon
  478. ;   guest ok = yes
  479. ;   read only = yes
  480.  
  481. # Un-comment the following and create the profiles directory to store
  482. # users profiles (see the "logon path" option above)
  483. # (you need to configure Samba to act as a domain controller too.)
  484. # The path below should be writable by all users so that their
  485. # profile directory may be created the first time they log on
  486. ;[profiles]
  487. ;   comment = Users profiles
  488. ;   path = /home/samba/profiles
  489. ;   guest ok = no
  490. ;   browseable = no
  491. ;   create mask = 0600
  492. ;   directory mask = 0700
  493.  
  494. [printers]
  495.    comment = All Printers
  496.    browseable = no
  497.    path = /var/spool/samba
  498.    printable = yes
  499.    guest ok = no
  500.    read only = yes
  501.    create mask = 0700
  502.  
  503. # Windows clients look for this share name as a source of downloadable
  504. # printer drivers
  505. [print$]
  506.    comment = Printer Drivers
  507.    path = /var/lib/samba/printers
  508.    browseable = yes
  509.    read only = yes
  510.    guest ok = no
  511. # Uncomment to allow remote administration of Windows print drivers.
  512. # You may need to replace 'lpadmin' with the name of the group your
  513. # admin users are members of.
  514. # Please note that you also need to set appropriate Unix permissions
  515. # to the drivers directory for these users to have write rights in it
  516. ;   write list = root, @lpadmin
  517. [partition3]
  518. #   nt acl support = yes
  519.    path = /home/runsh/partition3
  520.    browseable = yes
  521.    read only = yes
  522.    guest ok = yes
  523.    available = yes
  524.    public = yes
  525. #   force create mode = 0775
  526. #   force directory mode = 0775
  527.  
  528. [partition4]
  529. #   nt acl support = ok
  530.    path = /home/runsh/partition4
  531.    browseable = yes
  532.    guest ok = yes  
  533.    available = yes
  534.    public = yes
  535.  
  536. [partition2]
  537.    path=/home/runsh/partition2
  538.    browseable=yes
  539.    guest ok=yes
  540.    read only=yes
  541.    available = yes
  542.    public = yes
  543.  
  544. [Pictures]
  545.    path = /home/runsh/Pictures
  546.    available = yes
  547.    read only = no
  548.    guest ok = yes
  549.    browsable = yes
  550.    public = yes
  551.    writable = yes
  552.  
  553. [upload]
  554. #  nt acl support = ok
  555.    path = /home/runsh/partition1/home/akustik/upload
  556.    browseable = yes
  557.    read only = no
  558.    guest ok = yes
  559.    available = yes
  560.    writable = yes
  561.    public = yes
  562.    create mask = 0777
  563.    create mode = 777
  564.    directory mask = 0755
  565.    #force directory mode = 0444
  566.    #force create mode = 0444
  567.    #force user = nobody
  568.    #force group = nobody
  569.  
  570. [sekretariat-lab-vibrastik]
  571.    path = /home/runsh/partition2/team/sekretariat-lab-vibrastik
  572.    browseable = yes
  573.    read only = no
  574.    guest ok = yes
  575.    available = yes
  576.    writable = yes
  577.    public = yes
  578.    create mask = 777
  579.    create mode = 777
  580.    directory mask = 0755
  581.  
  582. [file-ta-vibrastic]
  583.    path=/home/runsh/partition2/file-ta-vibrastic
  584.    browseable = yes
  585.    guest ok = yes  
  586.    available = yes
  587.    public = yes
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top