# 
# http://daniel.fiser.cz/?go=samba
# 
#
# 26-Jul-06 amo Extract sample samba conf
# 
# 

  Samba PDC mini-HOWTO

....

          Basic smb.conf

Edit smb.conf configuration (RH: /etc/, FreeBSD: /usr/local/etc/) and
make sure you have the following setup:

[global]
        netbios name = <your-machine-name>
        server string = Samba %v on %L
        workgroup = <your-domain-name>
        
        ; domain & local master browser
        ; coz we're dealing with Win2k
        os level = 65
        prefered master = yes
        domain master = yes
        local master = yes
        domain logons = yes
        
        ; misc options
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192
        time server = yes

        ; do not show files starting with dots
        hide dot files = yes

        ; Central European code page support
        client code page = 852
        character set = ISO8859-2

        ; do not allow guest access, use only local system accounts
        security = user
        guest ok = no
        invalid users = bin deamon sys man postfix mail ftp 
        admin users = @wheel

        ; domain administrators
        domain admin group = @wheel
        domain admin users = root

        ; use encrypted passwords
        encrypt passwords = yes
        
        ; logging (max log size is in kB)
        log level = 2
        log file = /var/log/samba/log.%L
        max log size = 1000
        debug timestamp = yes
        syslog = 1

        ; user roaming profiles path
        logon path = \\%N\profiles\%u

        ; general logon script (in DOS format)
        logon script = logon.bat

Now you have to setup netlogon share and share for roaming profiles.
Change the path to your appropriate directories. Don't forget to change
list of valid users. I prefer having a special system group called
smbusers and restrict access only to them and root.

; share for domain controller
[netlogon]
        path = /home/samba/netlogon
        public = no
        writeable = no
        browsable = no
        valid users = root @smbusers

; share for storing user profiles
[profiles]
        path = /home/samba/profiles
        writeable = yes
        create mask = 0700
        directory mask = 0700
        browsable = no
        valid users = root @smbusers

© 2000–2006 Daniel Fišer <mailto:d@niel.fiser.cz>
#
# End of file