#/etc/samba/smb.conf

[global]

;basic server settings

        workgroup = workgroup

        netbios name = MyServer

        server string = Linux Samba Server running %v

        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192



;PDC and master browser setting

        os level = 64

        preferred master = no

        local master = yes

        domain master = no



;security and logging settings

        security = user

        encrypt passwords = yes

#       domain logons = no

        log file = /var/log/samba/log.%m

        log level = 2

        max log size = 50

        hosts allow = 127.0.0.1 172.16.2.0/255.255.255.0



;user profiles and home directory

        logon home = \%L\%U

        logon drive = W:

        logon path =\*Lprofiles\%U

        logon script = netlogon.bat



;add user and machines

        add user script = /usr/local/sbin/smbldap-useradd.pl -m -k /dev/null -n -g -s

/sbin/nologin -A 1 -B 1 -u %u



;sync UNIX passwords

        unix password sync = yes

        passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u

        passwd chat = *New*password* %n
 *Retype*new*password* %n


*passwd:*all*authentication*tokens*updated*



;LDAP-specific settings

        ldap admin dn = "cn=Manager,dc=mydomain,dc=com"

        ldap server = localhost

        ldap port = 389

        ldap ssl = no

        ldap suffix = "ou=Users,dc=mydomain,dc=com"



#=========Shares==============================

[homes]

        comment = Home Directories for %S

        writeable = yes

        browseable = no

        follow symlinks = no

        create mask = 0700

        directory mask = 0700



[profiles]

        path = /home/samba/profiles

        writeable = yes

        browseable = no

        create mask = 0600

        directory mask = 0700



[netlogon]

        comment = Network Logon Service

        path = /home/samba/netlogon

        read only = yes

        browseable = no

        write list = @administrator



[public]

        comment = Public Directory for All Users

        path = /home/public

        browseable = yes

        writeable = yes

        follow symlinks = no

        create mask = 0755

        directory mask = 0755

#/etc/openldap/slapd.conf

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27 20:00:31 kurt Exp

$

#

# See slapd.conf(5) for details on configuration options.

# This file should NOT be world readable.

#

include         /etc/openldap/schema/core.schema

include         /etc/openldap/schema/cosine.schema

include         /etc/openldap/schema/inetorgperson.schema

include         /etc/openldap/schema/nis.schema

include         /etc/openldap/schema/redhat/rfc822-MailMember.schema

include         /etc/openldap/schema/redhat/autofs.schema

include         /etc/openldap/schema/redhat/kerberosobject.schema



include         /etc/openldap/schema/samba.schema





# Define global ACLs to disable default read access.

include                /etc/openldap/slapd.acl



# Do not enable referrals until AFTER you have a working directory

# service AND an understanding of referrals.

#referral       target="_blank">ldap://root.openldap.org



pidfile //var/run/slapd.pid

argsfile        //var/run/slapd.args



# Create a replication log in /var/lib/ldap for use by slurpd.

#replogfile     /var/lib/ldap/master-slapd.replog



# Load dynamic backend modules:

# modulepath    /usr/sbin/openldap

# moduleload    back_ldap.la

# moduleload    back_ldbm.la

# moduleload    back_passwd.la

# moduleload    back_shell.la



#

# The next three lines allow use of TLS for connections using a dummy test

# certificate, but you should generate a proper certificate by changing to

# /usr/share/ssl/certs, running "make slapd.pem", and fixing permissions on

# slapd.pem so that the ldap user or group can read it.

# TLSCertificateFile /usr/share/ssl/certs/slapd.pem

# TLSCertificateKeyFile /usr/share/ssl/certs/slapd.pem

# TLSCACertificateFile /usr/share/ssl/certs/ca-bundle.crt

#

# Sample Access Control

#       Allow read access of root DSE

#       Allow self write access

#       Allow authenticated users read access

#       Allow anonymous users to authenticate

#

#access to dn="" by * read

#access to *

#       by self write

#       by users read

#       by anonymous auth

#

# if no access controls are present, the default is:

#       Allow read by all

#

# rootdn can always write!

#access to dn="" by * read

#access to *

#        by self write

#        by users read

#        by anonymous auth





#######################################################################

# ldbm database definitions

#######################################################################



database        ldbm

suffix          "dc=mydomain,dc=com"

#suffix         "o=My Organization Name,c=US"

rootdn          "cn=Manager,dc=mydomain,dc=com"

#rootdn         "cn=Manager,o=My Organization Name,c=US"

# Cleartext passwords, especially for the rootdn, should

# be avoided.  See slappasswd(8) and slapd.conf(5) for details.

# Use of strong authentication encouraged.

rootpw          secret

# rootpw                {crypt}ijFYNcSNctBYg

# The database directory MUST exist prior to running slapd AND

# should only be accessible by the slapd/tools. Mode 700 recommended.

directory       /var/lib/ldap

# Indices to maintain

#index  objectClass,uid,uidNumber,gidNumber,memberUid   eq

#index  cn,mail,surname,givenname                       eq,subinitial

index   primaryGroupID  eq

index   rid             eq

index   uidNumber       eq

index   gidNumber       eq

index   cn              pres,sub,eq

index   objectClass     eq

index   default         sub



# Replicas to which we should propagate changes

#replica host=ldap-1.example.com:389 tls=yes

#       bindmethod=sasl saslmech=GSSAPI

#       authcId=host/ldap-master.example.com@EXAMPLE.COM

#/etc/openldap/slapd.acl

access to attribute=userPassword

        by dn="cn=Manager,dc=mydomain,dc=com" write

        by anonymous auth

        by self write

        by * auth



access to *

        by dn="cn=Manager,dc=mydomain,dc=com" write

        by * read



access to dn=".*,dc=mydomain,dc=com" attr=userPassword

        by dn="cn=Manager,dc=mydomain,dc=com" write

        by self write

        by * auth



access to dn=".*,dc=mydomain,dc=com"

        by self write

        by * read



access to attribute=homeDirectory

        by dn="cn=Manager,dc=mydomain,dc=com" write

        by self write

        by * none

#/etc/openldap/ldap.conf

# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.4.8.6 2000/09/05 17:54:38 kurt

Exp $

#

# LDAP Defaults

#



# See ldap.conf(5) for details

# This file should be world readable but not world writable.



#BASE   dc=example, dc=com

#URI    ldap://ldap.example.com

target="_blank">ldap://ldap-master.example.com:666



#SIZELIMIT      12

#TIMELIMIT      15

#DEREF          never



HOST    127.0.0.1

BASE    dc=mydomain,dc=com