[global]

realm = DOM

workgroup = DOM
netbios name = storage

server string = Samba server on %h (v. %v)
security = user

wins support = yes

idmap uid = 10000-20000
idmap gid = 10000-20000

winbind enum users = yes
winbind enum groups = yes
winbind nested groups = yes

nt acl support = yes

domain master = yes
domain logons = yes

guest account = pcguest

logon script = %u.bat
logon path = \%L\profiles\%u
logon drive = H:

use kerberos keytab = Yes
log file = /var/log/samba/log.%m
max log size = 50
printcap name = cups

dns proxy = yes

use sendfile = Yes
passdb backend = ldapsam:ldap://127.0.0.1/

ldap admin dn       = cn=ldaproot,dc=dom
ldap suffix         = dc=dom
ldap group suffix   = ou=Group
ldap user suffix    = ou=People
ldap machine suffix = ou=Computers

os level = 65
preferred master = Yes
wins support = yes

ldap delete dn = Yes

add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"

add machine script = /usr/sbin/smbldap-useradd -t 0 -w "%u"

add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g %g %u


[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
browseable = no
guest ok = yes
writable = no
share modes = no

[share]
comment = Commonplace
path = /srv/share
read only = No

[homes]
comment = Home Directory for '%u'
browseable = no
writable = yes