[global] dos charset = 850 unix charset = ISO-8859-15 display charset = ISO-8859-15 workgroup = ZUHAUSE netbios name = ZUHAUSE server string = ZUHAUSE update encrypted = Yes obey pam restrictions = Yes #passdb backend = tdbsam passdb backend = ldapsam:ldap://127.0.0.1/ # pam password change = Yes passwd chat debug = yes log level = 1 log file = /var/log/samba.log time server = Yes socket options = SO_KEEPALIVE IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 ldap admin dn = cn=admin,dc=zuhause,dc=xx ldap suffix = o=zuhause.xx,dc=zuhause, dc=xx ldap group suffix = ou=sambagroups ldap user suffix = ou=sambauser ldap machine suffix = ou=sambacomputers ldap idmap suffix = ou=sambauser ldap ssl = no host msdfs = yes ldap passwd sync = Yes passwd program = /usr/sbin/smbldap-passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *all*authentication*tokens*updated* add user script = /usr/sbin/smbldap-useradd -m -a "%u" ldap delete dn = Yes delete user script = /usr/sbin/smbldap-userdel "%u" add machine script = /usr/sbin/smbldap-useradd -w "%u" add group script = /usr/sbin/smbldap-groupadd -p "%g" delete group script = /usr/sbin/smbldap-groupdel "%g" add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u" printcap name = cups #add user script = /usr/sbin/useradd -m %u #delete user script = /usr/sbin/userdel -r %u #add group script = /usr/sbin/groupadd %g #delete group script = /usr/sbin/groupdel %g #add user to group script = /usr/sbin/usermod -G %g %u #add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u # Hinweis: Das Folgende spezifiziert das Standard-Logon-Skript. # Pro-Benutzer-Logon-Skripten können im Benutzerkonto spezifiziert werden, und zwar durch pdbedit logon script = scripts\logon.bat # Dies setzt den Standard-Profilpfad. Setzen Sie Pro-Benutzerpfade mit pdbedit logon path = \\%L\profiles\%U logon drive = H: logon home = \\%L\%U domain logons = Yes os level = 255 preferred master = Yes domain master = Yes idmap uid = 15000-20000 idmap gid = 15000-20000 printing = cups #profile acls = Yes #use sendfile = no #large readwrite = no #max xmit = 16644 #Beispiel 3.8. Ingenieurbüro smb.conf (Freigaben und Dienste) [homes] comment = Home-Verzeichnisse valid users = %S read only = No browseable = No # Drucker Auto-Freigabe (stellt Drucker durch CUPS zur Verfügung) [printers] comment = Alle Drucker path = /var/spool/samba printer admin = root create mask = 0600 guest ok = Yes printable = Yes browseable = No [print$] comment = Druckertreiber-Freigabe path = /var/lib/samba/drivers write list = root printer admin = root # Wird für Domänen-Anmeldungen benötigt [netlogon] comment = Netzwerk-Anmeldedienst path = /var/lib/samba/netlogon admin users = root guest ok = Yes browseable = No read only = No # Für Profile, erstellt ein Benutzerverzeichnis unterhalb des Pfades # z.B.: mkdir -p /var/lib/samba/profiles/maryo [profiles] comment = Roaming Profile Share (wandernde Benutzerprofile) #path = /var/lib/samba/profiles path = /home/%U read only = No profile acls = Yes