Administrace komentářů

[global]

  dos charset = 852
  unix charset = UTF-8
  workgroup = DOMAINNAME

  load printers = no
  printcap name = /dev/null

  server string = %h
  interfaces = 192.168.1.0/24 lo
  socket address = 192.168.1.5
  wins support = no
  name resolve order = dns hosts bcast

  smb ports = 139

  log file = /var/log/samba/log.%m
  log level = 1
  max log size = 1000
  syslog = 0

  security = user
  map to guest = bad user
  encrypt passwords = true

  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

  add machine script = /etc/scripts/ldap-machineadd %u

  logon script = logon.vbs
  logon drive = H:

  ldap suffix = dc=domena,dc=cz
  ldap admin dn = cn=admin,dc=domena,dc=cz
  ldap delete dn = yes
  ldap machine suffix = ou=machines
  ldap group suffix = ou=groups
  ldap user suffix = ou=users
  ldap idmap suffix = ou=idmap # nevyuziva se
  ldap passwd sync = yes
  passdb backend = ldapsam:ldap://localhost

  domain master = yes
  domain logons = yes
  local master = yes
  os level = 128

  enable privileges = yes
  inherit acls = yes

[homes]
   browseable = no
   writable = yes
   valid users = %S
   create mask = 0711
   directory mask = 2711
   inherit permissions = yes
   map hidden = yes
   map system = yes
   csc policy = disable

[netlogon]
   path = /home/netlogon
   guest ok = yes
   writable = yes
   create mask = 0775
   directory mask = 2775
   map hidden = yes
   map system = yes

include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include         /etc/ldap/schema/samba.schema

suffix          "dc=domena,dc=cz"

access to attrs=userPassword
        by dn="cn=admin,dc=spsostrov,dc=cz" write
        by anonymous auth
        by self write
        by * none

access to attrs=sambaLMPassword,sambaNTPassword
        by dn="cn=admin,dc=spsostrov,dc=cz" write
        by * none

access to *
        by dn="cn=admin,dc=spsostrov,dc=cz" write
        by * read

dn: dc=domena,dc=cz
objectClass: top
objectClass: dcObject
objectClass: organization
o: domena.cz
dc: domena

dn: cn=admin,dc=domena,dc=cz
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: xxx=

dn: ou=users,dc=domena,dc=cz
objectClass: top
objectClass: organizationalUnit
ou: users

dn: ou=groups,dc=domena,dc=cz
objectClass: top
objectClass: organizationalUnit
ou: users

dn: ou=machines,dc=domena,dc=cz
objectClass: top
objectClass: organizationalUnit
ou: users