Exemple ConfSambaLdap

Le fichier ci-dessous est un exemple, il manque encore des explications et sans doute des ajouts, à venir...

 #======================= Global Settings =======================

 [global]

 # Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d

   workgroup = <MYGROUP>
   netbios name = <MYSERVER>
   server string = %h server (Samba LDAP %v)
   hosts allow = 192.168.0.  localhost

   encrypt passwords = yes
   security = user
   passdb backend = ldapsam

 # Script d'ajout automatique d'une machine dans le domaine
   add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
   admin users = @Admin,@Manager,adm_smb

   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   log level = 0
   use sendfile = no
   
   socket options = TCP_NODELAY

   domain logons = yes
   os level = 85
   preferred master = yes
   domain master = yes
   local master = yes
   dns proxy = no
   wins support = yes
   nt acl support = no
	
   # parametres de connexion des utilisateurs Windows
   # Je ne comprends pas pourquoi il faut cette ligne car c'est déjà dans l'annuaire ldap.
    logon path = \\%L\profiles\%U
   
   # parametres des imprimantes partagées
   load printers = yes
   printing = cups
   printcap name = /etc/printcap.cups
   printer admin = adm_smb
  
   # help Samba return out of quota messages on systems 
   # that are restricting the disk quota of users
   strict allocate = yes

   invalid users = root

   unix charset = iso8859-1
   
   ldap delete dn = Yes
   ldap passwd sync = Yes
   unix password sync = No

   ldap ssl = no
   ldap admin dn = <your_ldap_admin_dn>
   ldap suffix = <your_ldap_suffix>
   ldap user suffix = ou=Users
   ldap group suffix = ou=Groups
   ldap machine suffix = ou=Computers


 #======================= Share Definitions =======================

 [homes]
   comment = Repertoire de l'utilisateur
   read only = no
   browseable = no
   writable = yes
   create mask = 0600
   directory mask = 0700
   write list = %U

 [netlogon]
   comment = Network Logon Service
   path = /home/samba/netlogon
   read only = yes
   write list = @Admin
   public = no
   writable = no
   browseable = no 
   create mask = 0644

 [printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = yes
   public = yes
   guest ok = yes
   writable = no
   printable = yes
   create mode = 0777
   use client driver = yes

 [print$]
   comment = Printer Drivers
   path = /etc/samba/drivers
   browseable = yes
   guest ok = no
   read only = yes
   write list = root, @Manager

 [profiles]
   comment = Home privé pour windows
   path = /home/samba/profiles
   writeable = yes
   create mask = 0600
   directory mask = 0700
   browseable = No

 [partage]
   comment = Répertoire d'échange de la cyberbase
   path = /home/partage
   public = yes
   writable = yes
   create mask = 0666
   directory mask = 0777
   write list = @Manager, @Facilitator, @User

Pour utiliser la création de partages pour les groupes, il faut ajouter la commande suivante :

include = /etc/samba/smb.epnadmin.conf

Puis créer le fichier en root :

touch /etc/samba/smb.epnadmin.conf
chown .www-data /etc/samba/smb.epnadmin.conf
chmod g+rw /etc/samba/smb.epnadmin.conf