rendered paste body[global]
dos charset = 850
unix charset = ISO8859-1
workgroup = IDEALX-NT
netbios name = PDC-SRV
server string = SAMBA-LDAP PDC Server
passdb backend = ldapsam:ldap://127.0.0.1/
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
logon script = STARTUP.BAT
ldap admin dn = cn=Manager,dc=IDEALX,dc=ORG
ldap delete dn = Yes
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=IDEALX,dc=ORG
ldap ssl = start tls
ldap user suffix = ou=Users
comment = Home Directories
path = /home/samba/profiles
valid users = %U, "@Domain Admins"
force user = %U
read only = No
create mask = 0600
directory mask = 0700
guest ok = Yes
profile acls = Yes
browseable = No
csc policy = disable
# next line is a great way to secure the profiles
force user = %U
# next line allows administrator to access all profiles
valid users = %U @"Domain Admins"
...
logon script = STARTUP.BAT
...
[netlogon]
path = /home/samba/netlogon/
read only = Yes
[doc]
path = /usr/share/doc
create mask = 0750