# Parâmetros Globais
[global]

   # Dominio, Nome e Descricao
        workgroup = %SMBDOMAIN%
        netbios name = %SMBSERVER%
        server string = %SMBSTRING%

   # Disponibilizar impressora no Linux para Windows
        printcap name = cups
        load printers = yes
        printing = cups
        # printcap cache time, so samba will automatically load new cups printers
        printcap cache time = 60

   # Nao mostrar no servidor o Wizard "Adicionar Impressora"
        show add printer wizard = No

   # Quais interfaces de rede utilizar
        interfaces = lo, eth0
        bind interfaces only = Yes

   # Nivel de Mensagens
        log level = 1
        log file = /var/log/samba/%m.log
        max log size = 0
        debug level = 1
        syslog = 0

   # Atuar como um PDC
        security = user
        domain logons = yes
        preferred master = yes
        domain master = yes
        os level = 65

   # Tratamento das senhas
        encrypt passwords = yes

   # Equivalencia de usuarios Windows X Linux
        username map = /etc/samba/smbusers

   # Evitar o perfil ambulante do Windows NT/XP
        logon path =
        logon drive =
        logon home =

   # Script de logon em rede (deve ficar no compartilhamento netlogon - em formato DOS)
        logon script = %SMBSERVER%.BAT

   # Configuracoes para o LDAP
        passdb backend = ldapsam:ldaps://127.0.0.1
        ldap passwd sync = yes
        ldap delete dn = Yes
        ldap admin dn = %ROOTDN%
        ldap suffix = %LDAPSUFIX%
        ldap machine suffix = ou=Computadores
        ldap user suffix = ou=Usuarios
        ldap group suffix = ou=Grupos
        ldap idmap suffix = sambaDomainName=%SMBDOMAIN%
        idmap backend = ldap:ldaps://127.0.0.1
        idmap uid = 10000-20000
        idmap gid = 10000-20000
   # Permitir que usuarios do grupo "Administradores do Dominio" possam ingressar maquinas
   # WinXP/Win2000 ao dominio samba
   # to the domain
        enable privileges = yes

   # Scrips utilizados para Gerenciar Usuários da M$
   # adiconar/remover Usuarios
        add user script = /usr/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/sbin/smbldap-userdel "%u"
   # adiconar/remover Grupos
        add group script = /usr/sbin/smbldap-groupadd -p "%g"
        delete group script = /usr/sbin/smbldap-groupdel "%g"
   # Scripts para adiconar/remover Usuarios nos Grupos
        add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
   # Script para definir o grupo primario do usuario
        set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
   # Script par adicionar maquina Win NT/XP ingressar no Dominio
        add machine script = /usr/sbin/smbldap-useradd -w "%u"

   # Otimizacoes recomendadas em
        smb ports = 445 139
        name resolve order = wins bcast hosts
        utmp = Yes
        time server = Yes
        template shell = /bin/false
        winbind use default domain = no
        map acl inherit = Yes
        strict locking = Yes

   # Como o cliente ira' se comunicar com o servidor
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   # Servidor Wins da Rede
   # Quando já tiver um servidor Wins na rede
   # descomente a linha abaixo e acerte o IP do Wins
#      wins server = 10.0.134.223
   # Quando ainda não tiver um servidor Wins na rede
   # descomente a linha abaixo
       wins support = Yes
   

   # Ativar a internacionalizacao: permitir caracteres acentuados pelo Windows
        dos charset = CP850
        unix charset = ISO8859-1

   # Nao tentar fazer um lock nestes arquivos
        veto files = /*.eml/*.nws/*.{*}/
        veto oplock files = /*.doc/*.xls/*.mdb/

   # Tratar os arquivos que comecam com "." como ocultos para maquinas Windows
        hidedotfiles = yes

   # Simular a Lixeira do Windows
        recycle:repository = .lixeira
        recycle:keeptree = True
        recycle:touch = True
        recycle:versions = True
        recycle:exclude = *.tmp|*.temp|*.o|*.obj|~$*|*.$$$
        recycle:excludedir = /tmp|/temp|/trash
        recycle:noversions = .doc|.xls|.ppt|.dbf|.nsx|.idx|.dbt
        recycle:maxsize = 0

#=============================
#===== Compartilhamentos =====
#=============================

[netlogon]
        comment = Servico de Logon em Rede [ %SMBSERVER%.BAT ]
        path = /home/samba/netlogon
        browseable = Yes
        read only = Yes

[home]
        comment = Diretorio Pessoal de Cada Usuario [ U:\ ]
        path = /home/usr/%u
        browseable = no
        writeable = Yes
        create mask = 0600
        directory mask = 0700
#        vfs objects = recycle

[dados]
        comment = Sistemas e Dados de Usuarios [ F:\ ]
        path = /home/samba/dados
        writeable = Yes
        force create mode = 0660
        force directory mode = 02770
        vfs objects = recycle

[temp]
        comment = Dados Temporarios [ T:\ ]
        path = /home/samba/temp
        writeable = Yes
        force create mode = 0666
        force directory mode = 02777

[printers]
   comment = Spool de Impressao SMB
   path = /var/spool/samba
   browseable = No
   guest ok = Yes
   writeable = No
   printable = Yes
   create mode = 0700
   use client driver = yes

# This share is used for Windows NT-style point-and-print support.
# To be able to install drivers, you need to be either root, or listed
# in the printer admin parameter above. Note that you also need write access
# to the directory and share definition to be able to upload the drivers.
# For more information on this, please see the Printing Support Section of
# /usr/share/doc/samba-/docs/Samba-HOWTO-Collection.pdf
#
# A special case is using the CUPS Windows Postscript driver, which allows
# all features available via CUPS on the client, by publishing the ppd file
# and the cups driver by using the 'cupsaddsmb' tool. This requires the
# installation of the CUPS driver (http://www.cups.org/windows.php)
# on the server, but doesn't require you to use Windows at all :-).
[print$]
   path = /var/lib/samba/printers
   browseable = yes
   write list = @"Operadores de Impressao" root
   guest ok = yes
   inherit permissions = yes