# Samba config file created using SWAT
# from 192.168.192.169 (192.168.192.169)
# Date: 2003/11/14 17:23:54

# Global parameters
[global]
	ldap ssl = yes 
	idmap gid = 10000-20000
	time server = Yes
	netbios name = {pdc}
	idmap uid = 10000-20000
	workgroup = {MOJE}
	os level = 66
	ldap admin dn = "cn=Manager,dc={moje},dc=cz"
	max log size = 1000
	log level = 2 
	lanman auth = Yes
	log file = /var/log/samba/log.%m
	map acl inherit = Yes
	logon drive = M:
	null passwords = yes
	username map = /etc/samba/smbusers
	interfaces = eth0
	encrypt passwords = true
	winbind use default domain = Yes
	passdb backend = ldapsam:ldap://localhost
	min password length = 6 
	logon home = \\%L\%U
	template shell = /bin/bash
	ldap delete dn = No
	ldap suffix = dc={moje},dc=cz
	ldap machine suffix = ou=Computers
	ldap group suffix = ou=Groups
	ldap user suffix = ou=People
	ldap passwd sync = No 
	pam password change = No 
	server string = %h server (Samba %v)
	logon path = \\%L\profiles\%u
        delete user script = {cesta k smbldap skriptum}/smbldap-userdel '%u'
        add user script = {cesta k smbldap skriptum}/smbldap-useradd -a -g 201 -n -m -s /bin/false '%u'
        delete user from group script = {cesta k smbldap skriptum}/smbldap-groupmod -x '%u' `echo "%g"|sed "s/ /_/g"`
        add group script = {cesta k smbldap skriptum}/smbldap-groupadd `echo "%g"|sed "s/ /_/g"`
        delete group script = {cesta k smbldap skriptum}/smbldap-groupdel `echo "%g"|sed "s/ /_/g"`
        add user to group script = {cesta k smbldap skriptum}/smbldap-groupmod -m '%u' `echo "%g"|sed "s/ /_/g"`
        add machine script = {cesta k smbldap skriptum}/smbldap-useradd -w -s /bin/false '%u'

	syslog = 0
	panic action = /usr/share/samba/panic-action %d
	ldap idmap suffix = ou=Idmap
	domain master = Yes 
	preferred master = Yes 
	domain logons = Yes

#	passwd chat = "New password:" %n\n "OK*"
#	passwd program = /usr/local/bin/pass_test.pl "%u"
#	unix password sync = Yes

[homes]
	comment = Home Directories
	read only = No
	create mask = 0700
	directory mask = 0700
	inherit acls = Yes
	browseable = Yes 

[printers]
	comment = All Printers
	path = /tmp
	create mask = 0700
	printable = Yes
	browseable = No

[profiles]
	comment = Profiles Store
	path = /usr/local/filestore/profiles
	admin users = @administrator
	writeable = Yes
	create mask = 0710
	force create mode = 0710
	directory mask = 0710
	force directory mode = 0710
	csc policy = manual 
	profile acls = Yes
	map system = Yes
	map hidden = Yes

[netlogon]
	path = /usr/local/filestore/netlogon
	write list = ntadmin, admin1

[VPHOME]
	path = /usr/local/filestore/VPHOME
	writeable = no
[VPLOGON]
	path = /usr/local/filestore/VPLOGON
	writeable = no

[ldaproot]
	path = /var/lib/ldap
	writeable = no
	read list = ag administrator

[print$]
	comment = Printer Drivers
	path = /var/lib/samba/printers