| 1 | [global] |
|---|
| 2 | workgroup = WORKGROUP |
|---|
| 3 | netbios name = SYN3FS |
|---|
| 4 | server string = "Syn-3 Fileserver" |
|---|
| 5 | security = user |
|---|
| 6 | encrypt passwords = Yes |
|---|
| 7 | unix password sync = No |
|---|
| 8 | ldap password sync = Yes |
|---|
| 9 | log level = 0 |
|---|
| 10 | log file = /var/log/samba/log.%m |
|---|
| 11 | hide files = /desktop.ini/ntuser.ini/NTUSER.*/Koppelingen/ |
|---|
| 12 | max log size = 250 |
|---|
| 13 | time server = Yes |
|---|
| 14 | #domain admin group = @"Domain Admins" root |
|---|
| 15 | logon script = logon.bat |
|---|
| 16 | logon path = \\%L\profiles\%U |
|---|
| 17 | logon drive = H: |
|---|
| 18 | logon home = \\%L\%U |
|---|
| 19 | domain logons = Yes |
|---|
| 20 | os level = 65 |
|---|
| 21 | domain master = Yes |
|---|
| 22 | veto files = /Network Trash Folder/TheVolumeSettingsFolder/lost+found/ |
|---|
| 23 | winbind uid = 10000-20000 |
|---|
| 24 | winbind gid = 10000-20000 |
|---|
| 25 | load printers = yes |
|---|
| 26 | printing = bsd |
|---|
| 27 | |
|---|
| 28 | use client driver = no |
|---|
| 29 | |
|---|
| 30 | #### ldap configuratie |
|---|
| 31 | passdb backend = ldapsam:"ldap://ldap-master ldap://ldap-slave" |
|---|
| 32 | ldap admin dn = cn=Manager,dc=syn-3 |
|---|
| 33 | ldap suffix = dc=syn-3 |
|---|
| 34 | ldap group suffix = ou=Groups |
|---|
| 35 | ldap user suffix = ou=Users |
|---|
| 36 | ldap machine suffix = ou=Computers |
|---|
| 37 | ldap idmap suffix = ou=Users |
|---|
| 38 | ldap ssl = off |
|---|
| 39 | add user script = /usr/sbin/smbldap-useradd -m "%u" |
|---|
| 40 | ldap delete dn = Yes |
|---|
| 41 | # delete user script = /usr/sbin/smbldap-userdel "%u" |
|---|
| 42 | add machine script = /usr/sbin/smbldap-useradd -w "%u" |
|---|
| 43 | add group script = /usr/sbin/smbldap-groupadd -p "%g" |
|---|
| 44 | # delete group script = /usr/sbin/smbldap-groupdel "%g" |
|---|
| 45 | add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" |
|---|
| 46 | delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g" |
|---|
| 47 | set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u" |
|---|
| 48 | |
|---|
| 49 | unix extensions = yes |
|---|
| 50 | store dos attributes = yes |
|---|
| 51 | |
|---|
| 52 | #Recycle bin |
|---|
| 53 | recycle:keeptree = yes |
|---|
| 54 | recycle:touch = yes |
|---|
| 55 | recycle:versions = yes |
|---|
| 56 | recycle:directory_mode = 0777 |
|---|
| 57 | recycle:repository = ./trash |
|---|
| 58 | |
|---|
| 59 | #since samba version 3.4: |
|---|
| 60 | map untrusted to domain = yes |
|---|
| 61 | #since samba version 4.4.4 / Windows 10: |
|---|
| 62 | #from: https://wiki.samba.org/index.php/Required_settings_for_NT4-style_domains |
|---|
| 63 | max protocol = NT1 |
|---|
| 64 | |
|---|
| 65 | |
|---|
| 66 | # Hier worden de globale opties geinclude |
|---|
| 67 | include = /home/system/samba/shares/homes.samba |
|---|
| 68 | include = /home/system/samba/shares/profiles.samba |
|---|
| 69 | include = /home/system/samba/shares/root.samba |
|---|
| 70 | include = /home/system/samba/shares/netlogon.samba |
|---|
