# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not many any basic syntactic errors.
#
#======================= Global Settings =====================================
[global]

##
## Basic Server Settings
##

	# workgroup = NT-Domain-Name or Workgroup-Name
	workgroup = WORKGROUP

	# server string is the equivalent of the NT Description field
	server string = Samba Server

	# netbios name is the name you will see in "Network Neighbourhood",
	# but defaults to your hostname
	;  netbios name = <name_of_this_server>

	# This option is important for security. It allows you to restrict
	# connections to machines which are on your local network. The
	# following example restricts access to two C class networks and
	# the "loopback" interface. For more examples of the syntax see
	# the smb.conf man page
	; hosts allow = 192.168.1. 192.168.2.0./24 192.168.3.0/255.255.255.0 127.0.0.1

	# Uncomment this if you want a guest account, you must add this to /etc/passwd
	# otherwise the user "nobody" is used
	; guest account = pcguest

	# this tells Samba to use a separate log file for each machine
	# that connects
	log file = /var/log/samba/log.%m

	# How much information do you want to see in the logs?
	# default is only to log critical messages
	; log level = 3

	# Put a capping on the size of the log files (in Kb).
	max log size = 50

	# Security mode. Most people will want user level security. See
	# security_level.txt for details.
	security = user

	# Using the following line enables you to customise your configuration
	# on a per machine basis. The %m gets replaced with the netbios name
	# of the machine that is connecting.
	;   include = /etc/samba/smb.conf.%m

	# Most people will find that this option gives better performance.
	# See speed.txt and the manual pages for details
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

	# Configure Samba to use multiple interfaces
	# If you have multiple network interfaces and want to limit smbd will
	# use, list the ones desired here.  Otherwise smbd & nmbd will bind to all
	# active interfaces on the system.  See the man page for details.
	;   interfaces = 192.168.12.2/24 192.168.13.2/24

	# Should smbd report that it has MS-DFS Capabilities? Only available
	# if --with-msdfs was passed to ./configure
	; host msdfs = yes

##
## Network Browsing
##
	# set local master to no if you don't want Samba to become a master
	# browser on your network. Otherwise the normal election rules apply
	; local master = no

	# OS Level determines the precedence of this server in master browser
	# elections. The default value (33) should be reasonable
	; os level = 33

	# Domain Master specifies Samba to be the Domain Master Browser. This
	# allows Samba to collate browse lists between subnets. Don't use this
	# if you already have a Windows NT domain controller doing this job
	; domain master = yes

	# Preferred Master causes Samba to force a local browser election on startup
	# and gives it a slightly higher chance of winning the election
	; preferred master = yes


##
## WINS & Name Resolution
##
	# All NetBIOS names must be resolved to IP Addresses
	# 'Name Resolve Order' allows the named resolution mechanism to be specified
	# the default order is "host lmhosts wins bcast". "host" means use the unix
	# system gethostbyname() function call that will use either /etc/hosts OR
	# DNS or NIS depending on the settings of /etc/host.config, /etc/nsswitch.conf
	# and the /etc/resolv.conf file. "host" therefore is system configuration
	# dependant. This parameter is most often of use to prevent DNS lookups
	# in order to resolve NetBIOS names to IP Addresses. Use with care!
	# The example below excludes use of name resolution for machines that are NOT
	# on the local network segment
	# - OR - are not deliberately to be known via lmhosts or via WINS.
	; name resolve order = wins lmhosts bcast

	# Windows Internet Name Serving Support Section:
	# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
	; wins support = yes

	# WINS Server - Tells the NMBD components of Samba to be a WINS Client
	#	Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
	; wins server = w.x.y.z

	# WINS Proxy - Tells Samba to answer name resolution queries on
	# behalf of a non WINS capable client, for this to work there must be
	# at least one	WINS Server on the network. The default is NO.
	; wins proxy = yes

	# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
	# via DNS nslookups.
	dns proxy = no


##
## Passwords & Authentication
##
	# Use password server option only with security = server
	# The argument list may include:
	#   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
	# or to auto-locate the domain controller/s
	# When using security = domain, you should use password server = *
	;   password server = *
	;   password server = <NT-Server-Name>

	# You may wish to use password encryption. Please read
	# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
	# Do not enable this option unless you have read those documents
	# Encrypted passwords are required to samba in a Windows NT domain
	encrypt passwords = yes
	
	# The smbpasswd file is only required by a server doing authentication, thus
	# members of a domain do not need one.
	smb passwd file = /var/lib/samba/private/smbpasswd

	# Should smbd obey the session and account lines in /etc/pam.d/samba ?
	# only available if --with-pam was used at compile time
	; obey pam restrictions = yes

	# When using encrypted passwords, Samba can synchronize the local
	# UNIX password as well.  You will also need the "passwd chat" parameters
	; unix password sync = yes

	# how should smbd talk to the local system when changing a UNIX
	# password?  See smb.conf(5) for details
	# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
	# NOTE2: You do NOT need these to allow workstations to change only
	#        the encrypted SMB passwords. They allow the Unix password
	#        to be kept in sync with the SMB password.
	# passwd chat = <custom chat string>
	;  unix password sync = Yes
	;  passwd program = /usr/bin/passwd %u
	;  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
	;*passwd:*all*authentication*tokens*updated*successfully*
	

	# This is only available if you compiled Samba to include --with-pam
	# Use PAM for changing the password
	; pam password change = yes

	# Unix users can map to different SMB User names
	;  username map = /etc/samba/smbusers


##
## Domain Control
##
	# Enable this if you want Samba act as a domain controller.
	# make sure you have read the Samba-PDC-HOWTO included in the documentation
	# before enabling this parameter
	;   domain logons = yes

	# if you enable domain logons then you may want a per-machine or
	# per user logon script
	# run a specific logon batch file per workstation (machine)
	; logon script = %m.bat
	# run a specific logon batch file per username
	; logon script = %U.bat

	# Where to store roving profiles (only for Win95 and WinNT)
	#        %L substitutes for this servers netbios name, %U is username
	#        You must uncomment the [Profiles] share below
	; logon path = \\%L\Profiles\%U

	# UNC path specifying the network location of the user's home directory
	# only used when acting as a DC for WinNT/2k/XP.  Ignored by Win9x clients
	; logon home = \\%L\%U\.profile

	# The add user script is used by a domain member to add local user accounts
	# that have been authenticated by the domain controller, or by the domain
	# controller to add local machine accounts when adding machines to the domain.
	# The script must work from the command line when replacing the macros,
	# or the operation will fail. Check that groups exist if forcing a group.
	# Script for domain controller for adding machines:
	; add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Accoun$
	# Script for domain member for adding local accounts for authenticated users:
	; add user script = /usr/sbin/useradd -s /bin/false %u

	# These scripts are used on a domain controller or stand-alone
	# machine to add or delete corresponding unix accounts
	;  add user script = /usr/sbin/useradd %u
	;  add group script = /usr/sbin/groupadd %g
	;  add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u
	;  delete user script = /usr/sbin/userdel %u
	;  delete user from group script = /usr/sbin/deluser %u %g
	;  delete group script = /usr/sbin/groupdel %g

	# domain admin group is a list of unix users or groups who are made members
	# of the Domain Admin group
	; domain admin group = root @wheel
	#
	# domain guest groups is a list of unix users or groups who are made members
	# of the Domain Guests group
	; domain guest group = nobody @guest

	# What drive should the "logon home" be mounted at upon login ?
	# only used when acting as a DC for WinNT/2k/XP.  Ignored by Win9x clients
	; logon drive = H:

##
## Printing
##

	# If you want to automatically load your printer list rather
	# than setting them up individually then you'll need this
	load printers = yes

	# you may wish to override the location of the printcap file
	# cups printing is the default
	printcap name = lpstat

	# It should not be necessary to specify the print system type unless
	# it is non-standard. Currently supported print systems include:
	# bsd, sysv, plp, lprng, aix, hpux, qnxm, cups
	printing = cups

	# list of users and groups which should be able to remotely manage
	# printer drivers installed on the server
	# printer admin = @<group> <user>
	; printer admin = @adm


##
## Winbind
##

	# specify the uid range which can be used by winbindd
	# to allocate uids for Windows users as necessary
	; winbind uid = 10000-20000

	# specify the uid range which can be used by winbindd
	# to allocate uids for Windows users as necessary
	; winbind gid = 10000-20000

	# Define a home directory to be given to passwd(5) style entries
	# generated by libnss_winbind.so.  You can use variables here
	; winbind template homedir = /home/%D/%U

	# Specify a shell for all winbind user entries return by the
	# libnss_winbind.so library.
	; winbind template shell = /bin/bash

	# What character should be used to separate the DOMAIN and Username
	# for a Windows user.  The default is DOMAIN\user, but many people
	# prefer DOMAIN+user
	; winbind separator = +



###
### File Naming
###
	# Case Preservation can be handy - system default is _no_
	# NOTE: These can be set on a per share basis
	;  preserve case = no
	;  short preserve case = no
	# Default case is normally upper case for all DOS files
	;  default case = lower
	# Be very careful with case sensitivity - it can break things!
	;  case sensitive = no

	# you can match a Windows code page with a UNIX character set.
	# Windows: 437 (US), 737 (GREEK), 850 (Latin1 - Western European),
	# 852 (Eastern Eu.), 861 (Icelandic), 932 (Cyrillic - Russian),
	# 936 (Japanese - Shift-JIS), 936 (Simpl. Chinese), 949 (Korean Hangul),
	# 950 (Trad. Chin.).
	# UNIX: ISO8859-1 (Western European), ISO8859-2 (Eastern Eu.),
	# ISO8859-5 (Russian Cyrillic), KOI8-R (Alt-Russ. Cyril.)
	# This is an example for french users:
	;   client code page = 850
	;   character set = ISO8859-1

#============================ Share Definitions ==============================
[homes]
     comment = Home Directories
     browseable = no
     writable = yes

# Un-comment the following and create the netlogon directory for Domain Logons
; [netlogon]
;    comment = Network Logon Service
;    path = /var/lib/samba/netlogon
;    guest ok = yes
;    writable = no
;    share modes = no


# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
;[Profiles]
;    path = /var/lib/samba/profiles
;    browseable = no
;    guest ok = yes


# NOTE: If you have a CUPS or BSD-style print system there is no need to
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no

   # Set guest ok = yes to allow user 'guest account' to print
   guest ok = yes

   writable = no
   printable = yes
   create mode = 0700

   # You must configure the samba printers with the appropriate Windows
   # drivers on your Windows clients. On the Samba server no filtering is
   # done. If you wish that the server provides the driver and the clients
   # send PostScript ("Generic PostScript Printer" under Windows), you have
   # to swap the 'print command' line below with the commented one.
   print command = lpr -P %p -o raw %s -r   # using client side printer drivers.
   ; print command = lpr -P %p %s # using cups own drivers (use generic PostScript on clients).

   # The following two commands are the samba defaults for printing=cups
   # change them only if you need different options:
   ; lpq command = lpq -P %p
   ; lprm command = cancel %p-%j


# This share is used for Windows NT-style point-and-print support.
# To be able to install drivers, you need to be either root, or listed
# in the printer admin parameter above. Note that you also need write access
# to the directory and share definition to be able to upload the drivers.
# For more information on this, please see the Printing Support Section of
# /usr/share/doc/samba-<version>/docs/Samba-HOWTO-Collection.pdf
[print$]
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   write list = @adm root


# This one is useful for people to share files
;[tmp]
;   comment = Temporary file space
;   path = /tmp
;   read only = no
;   public = yes


# MS-DFS support is only available if Samba was compiled to
# include --with-msdfs
;[dfsroot]
;   dfs root = yes


# A publicly accessible directory, but read only, except for people in
# the "staff" group
;[public]
;   comment = Public Stuff
;   path = /home/samba
;   public = yes
;   writable = yes
;   printable = no
;   write list = @staff


##
## Other examples.
##

# A private printer, usable only by fred. Spool data will be placed in fred's
# home directory. Note that fred must have write access to the spool directory,
# wherever it is.
;[fredsprn]
;   comment = Fred's Printer
;   valid users = fred
;   path = /homes/fred
;   printer = freds_printer
;   public = no
;   writable = no
;   printable = yes

# A private directory, usable only by fred. Note that fred requires write
# access to the directory.
;[fredsdir]
;   comment = Fred's Service
;   path = /usr/somewhere/private
;   valid users = fred
;   public = no
;   writable = yes
;   printable = no

# a service which has a different directory for each machine that connects
# this allows you to tailor configurations to incoming machines. You could
# also use the %U option to tailor it by user name.
# The %m gets replaced with the machine name that is connecting.
;[pchome]
;  comment = PC Directories
;  path = /usr/pc/%m
;  public = no
;  writable = yes

# A publicly accessible directory, read/write to all users. Note that all files
# created in the directory by users will be owned by the default user, so
# any user with access can delete any other user's files. Obviously this
# directory must be writable by the default user. Another user could of course
# be specified, in which case all files would be owned by that user instead.
;[public]
;   path = /usr/somewhere/else/public
;   public = yes
;   only guest = yes
;   writable = yes
;   printable = no

# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
;[myshare]
;   comment = Mary's and Fred's stuff
;   path = /usr/somewhere/shared
;   valid users = mary fred
;   public = no
;   writable = yes
;   printable = no
;   create mask = 0765