[global]
netbios name = BILL
workgroup = RUSHESFX
security = domain
passdb backend = ldapsam:ldap://ldap0.rushesfx.co.uk
ldap admin dn = cn=Directory Manager
ldap suffix = dc=rushesfx,dc=co,dc=uk
ldap user suffix = ou=People
ldap machine suffix = ou=Computers
ldap group suffix = ou=Groups
#log level = 10
log file = /var/log/samba/%m.log
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
username map = /etc/samba/smbusers

os level = 32
# Operating System and Configuration	OS Type value
# ------------------------------------------------
# MS-DOS or Win 3.x, with Microsoft		?
#	Network Client installed
# Windows for Workgroups			1
# Windows 95					1
# Windows 98					1
# Windows Me					1
# Windows NT 3.x Workstation			16
# Windows NT 3.x Server, member server		16
# Windows NT 3.x Server, as PDC			32
# Windows NT 4 Workstation			16
# Windows NT 4 Server, as member server		16
# Windows NT 4 Server, as PDC			32
# Windows 2K Professional			16
# Windows 2K Adv.Server, as member server	16
# Windows 2K Adv.Server, as NT-PDC		32
# Windows XP Home				16
# Windows XP Professional			16

domain logons = yes
domain master = yes
local master = yes
preferred master = yes
#smb ports = 139 # default is 139 & 445
wins support = yes

logon home =
logon path =

logon script = %U.bat

# enable for roaming profiles
#logon home = \\BILL\%U
#logon path = \\BILL\%U\profile
#logon drive = H:

template shell = /bin/false
winbind use default domain = yes

idmap uid = 10000-40000
idmap gid = 10000-40000
template homedir = /dev/null

winbind enum users = yes
winbind enum groups = yes
winbind cache time = 300
# no is default
winbind nested groups = No


add machine script = /usr/sbin/smbldap-useradd -w %u
add user script = /usr/sbin/smbldap-usermod -a -B 0 %u
delete user script = /usr/sbin/smbldap-userdel %u
add group script = /usr/sbin/smbldap-groupadd -p %g
delete group script = /usr/sbin/smbldap-groupdel %g
add user to group script = /usr/sbin/smbldap-groupmod -m %g %u
delete user from group script = /usr/sbin/smbldap-groupmod -x %g %u
set primary group script = /usr/sbin/smbldap-usermod -g %g %u

Dos charset = 850
Unix charset = ISO8859-1

[netlogon]
path = /var/lib/samba/netlogon
read only = yes
browsable = no

# enable for roaming profiles
#[profiles]
#	path = /var/lib/samba/profiles
#        comment = Users profiles
#        read only = No
#        create mask = 0664
#        directory mask = 0775
#        browseable = No
#        guest ok = yes
#        profile acls = yes
#        csc policy = disable
#        force user = %U
#        valid users = %U @"Domain Admins"

#[homes]
#       comment = Home Directories
#        path = /tmp/%U/data
#        valid users = %U
#        read only = No
#        create mask = 0664
#        directory mask = 0775
#        browseable = No