[global]

	#####################################################################
	# Server Settings
	#####################################################################

	panic action = "/usr/local/bin/panic-action %d"
	pid directory = /var/run/samba
	log file = /var/log/samba/%m.log
	interfaces = 127.0.0.1 192.168.29.4
	bind interfaces only = true
	log level = 1
	ldap debug level = 0




	#####################################################################
	# Samba Server Options
	#####################################################################

	netbios name = genome
	server string = 
	workgroup = MUC
	os level = 64
	encrypt passwords = yes

	local master = yes
	domain master = yes
	domain logons = yes
	time server = yes

	logon script = logonscript.bat
	logon path = \\%L\Profiles\%U
	logon drive = H:
	logon home = \\%L\%U

	mangling method = hash2
	utmp = no
	unix extensions = yes
	enable privileges = yes

	guest account = nobody
	#map to guest = Bad User
	map to guest = Never

	load printers = yes
	printing = lprng
	printcap name = /etc/printcap

	admin users = Administrator

	veto files = /.AppleDouble/.AppleDesktop/Network Trash Folder/TheFindByContentFolder/TheVolumeSettingsFolder/.viminfo/.bash_history/Platform.ini/PUTTY.RND/lost+found/
	delete veto files = yes




	#####################################################################
	# Password Management
	#####################################################################

	passdb backend = ldapsam:ldap://192.168.29.4/
	ldap admin dn = uid=samba,ou=Users,dc=mr,dc=lfmg,dc=de
	ldap suffix = dc=mr,dc=lfmg,dc=de
	ldap group suffix = ou=Groups
	ldap user suffix = ou=Users
	ldap machine suffix = ou=Computers
	ldap idmap suffix = ou=Idmap
	ldap passwd sync = Yes
	ldap ssl = no
	ldap delete dn = Yes
	add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
	delete group script = /usr/local/sbin/smbldap-groupdel "%g"
	add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
	delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
	add machine script = /usr/local/sbin/smbldap-useradd -t 0 -w %u
	set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
	ldapsam:trusted = yes





	#####################################################################
	# Wins Name Resolution
	#####################################################################

	#name resolve order = lmhosts wins host bcast
	name resolve order = lmhosts wins host
	#wins server =
	wins support = yes
	preferred master = yes
	wins proxy = yes
	enhanced browsing = no




	#####################################################################
	# Character Settings
	#####################################################################

	unix charset = UTF-8
	display charset = UTF-8
	dos charset = 850




	#####################################################################
	# Performance Settings
	#####################################################################

	use sendfile = yes
	large readwrite = yes
	socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 SO_RCVBUF=8192
	username level = 0
	keep alive = 30
	kernel oplocks = true
	veto oplock files = /*.doc/*.xls/*.mdb/




	#####################################################################
	# Share Settings (Global)
	#####################################################################

	map archive = no
	map system = no
	map hidden = no
	writeable = yes
	inherit permissions = yes




#####################################################################
# Include Files
#####################################################################

include = /etc/samba/printers.conf



##############################################################################
# Standard Shares
##############################################################################

[Netlogon]
	path = /shares/Netlogon
	comment = Anmeldescripte
	browseable = yes
	writeable = no
	csc policy = disable
	csc policy = disable
	guest ok = yes
	oplocks = no
	level2 oplocks = no


[Profiles]
	path = /shares/Profiles
	comment = User Profile Directories
	browsable = no
	force create mode = 0600
	directory mode = 0700
	csc policy = disable
	guest ok = yes
        oplocks = no
	level2 oplocks = no


[homes]
	comment = Persoenliches Verzeichnis
	browseable = no
	force create mode = 0600
	force directory mode = 0700
	csc policy = disable





##############################################################################
# Mapped Netzwork Shares
##############################################################################

[IT]
	path = /shares/IT
	comment = IT-Abteilung
	browseable = yes
	force create mode = 0660
	force directory mode = 2770
	csc policy = disable
	guest ok = yes
	valid users = 
	invalid users = "@Domain Guests"