##====================
# /etc/samba/smb.conf
#====================

# Global parameters
###################
[global]

  	hosts deny = all
	hosts allow = 192.168.3.182 127.0.0.

	display charset = UTF-8
	unix charset = UTF-8
	dos charset = CP850
	unix extensions = no

	interfaces = eth0
  	bind interfaces only = yes
	netbios name = TESTFS

	workgroup = DEV.MUC.DW
	server string = Test Server
	security = USER
  	realm = MUC.DYNAWARE.DE
#	password server = dc2.muc.dynaware.de
	client use spnego = yes
	client ntlmv2 auth = yes
	encrypt passwords = yes
	private dir = /var/lib/samba
	passdb backend = tdbsam

#	syslog = 1
#	syslog only = no
#	log level = 5 all:5 
	log level = 10
#	log file = /dev/null
#	log file = /var/log/samba/log.%m
	log file = /var/log/samba/samba.log
	max log size = 40960

	name resolve order = lmhosts hosts wins bcast
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

	os level = 20
	wins support = no
	dns proxy = no

	idmap uid = 20000-29999
	idmap gid = 20000-29999

	winbind separator = #
	winbind enum users = yes
	winbind enum groups = yes
	winbind nested groups = yes
 
	inherit acls = yes
	map acl inherit = yes
	
	template shell = /bin/bash

# Do not map DOS attributes like SYSTEM, HIDDEN, ARCHIVE or READ-ONLY to
# UNIX permission bits. Instead, DOS attributes will be stored onto an
# extended attribute in the UNIX filesystem, associated with the file or
# directory. For this to operate correctly, the parameters map hidden,
# map system, map archive must be set to off. This parameter writes the
# DOS attributes as a string into the extended attribute 'user.DOSATTRIB'.
	store dos attributes = yes
	map archive = no
	map hidden  = no
	map system  = no
	map readonly = no

	# VISTA OFFLINE SYNC FEATURE
	############################ 
	oplocks = yes
	level2 oplocks = yes
	kernel oplocks = no
	# VISTA END

# Allows readonly files to be deleted.
# This is not normal DOS semantics, but is allowed by UNIX.
	delete readonly = yes

	dos filemode = yes
	dos filetimes = yes
	dos filetime resolution = yes

#  veto files = /*.eml/*.nws/*.{*}/
#  veto oplock files = /*.doc/*.xls/*.mdb/

#	printing = cups
#	printcap name = cups
	load printers = no
#	show add printer wizard = yes
##	use client driver = yes

[root]
	comment = Test Root
	path = /export/netroot
	public = yes
	browseable = yes
	writeable = yes
	inherit acls = yes
	map acl inherit = yes
	create mask = 0755
	directory mask = 0755
	valid users = hlampl
	admin users = hlampl
[data]
	comment = Test Root
	path = /var/data1
	public = yes
	browseable = yes
	writeable = yes
	inherit acls = yes
	map acl inherit = yes
	create mask = 0755
	directory mask = 0755
	valid users = hlampl
	admin users = hlampl