[global] 

# --------------------------------------------------------
# setting base configuration parameters
#
# --------------------------------------------------------
workgroup = FB6
netbios name = FRIGG
server string = AFS
security = ADS
realm = FB6.UNI-WUPPERTAL.DE
auth methods = winbind
# password server = AD logon server
password server = 132.195.120.9 132.195.120.12
wins server = 132.195.120.12
client use spnego = yes
client signing = yes
# added wg. ticket #5344
#client lanman auth = no
#client ntlmv2 auth = yes
encrypt passwords = yes
host msdfs = no
#domain logons = yes

# fuer Samba 3.3.0
# damit keine verschluesselte Verbindung zum Domain Controller
# aufgebaut wird
ldap ssl = no
obey pam restrictions = no

# ---------------------------------------------------------
# printer settings
# ??? better disable these settings ???
# ---------------------------------------------------------
# printcap name = cups 
# disable spoolss = Yes 
# show add printer wizard = No 

# ---------------------------------------------------------
# ID mapping parameters
# mapping windows users to unix users
# this is performed on the basis of sid on windows and
# unix with uid for users and gid for groups
# the backend parameter rid allows to get the same mapping
# form sid to uid because it is determined algorithmically
# that way we get the same mapping even if we use samba on
# several disparate systems
# CHANGE NOTIFICATIO: with v3.3.0 there are changes
# to idmap; idmap domains is no longer supported
# ---------------------------------------------------------
#idmap domains = FB6
#idmap backend = rid
#idmap backend = tdb
idmap config FB6:backend   = rid
#idmap config FB6:base_rid  = 0
idmap config FB6:range     = 10000 - 499999
idmap uid = 10000-499999
idmap gid = 10000-499999

winbind separator =+
winbind use default domain = Yes 
winbind enum users = no
winbind enum groups = no
winbind cache time = 60
winbind gid = 10000-499999
winbind uid = 10000-499999

#template homedir = /gpfs/fbb/user/%U
#template shell = /opt/pware/bin/bash
#use sendfile = Yes 
#printing = cups 
#ldap suffix = "dc=FB6, dc=UNI-WUPPERTAL, dc=DE"

#-------------------------------------------------------
# Logging options
#
#-------------------------------------------------------
#
# higher log levels have a negative impact on performance
log level = 1
log file = /opt/pware/var/log/fbb.frigg.log.%m
max log size = 5000000
debug timestamp = yes
#utmp = yes

#-------------------------------------------------------
# ACL Support
#
#-------------------------------------------------------
map acl inherit = yes
nt acl support = yes
inherit acls = yes
inherit permissions = yes
inherit owner = yes
admin users = @"FB6+domain admins"

#-------------------------------------------------------
# problem with DOS attributes and UNIX permissions
# 20091105, VA
#-------------------------------------------------------
ea support = yes
store dos attributes = Yes
map archive = No
map hidden = No
map system = No
map readonly = No

#-------------------------------------------------------
# Performance options
#
#-------------------------------------------------------
socket options = TCP_NODELAY IPTOS_LOWDELAY 

# comment: VA, 01.05.2008
# deactivated, as it seems that this was our performance killer
# the original values were 8192 each; i have adapted both
# parameter values for AIX configuration
# SO_RCVBUF=16384 SO_SNDBUF=16384 


#-------------------------------------------------------
# Include Configuration Files
#
#-------------------------------------------------------
include = /opt/pware/lib/fbb-user.conf
include = /opt/pware/lib/fbb-ls.conf
include = /opt/pware/lib/fbb-apps.conf
include = /opt/pware/lib/fbb-projekte.conf
include = /opt/pware/lib/fbb-profiles.conf