1# 2# Sample configuration file for the Samba suite for Debian GNU/Linux. 3# 4# 5# This is the main Samba configuration file. You should read the 6# smb.conf(5) manual page in order to understand the options listed 7# here. Samba has a huge number of configurable options most of which 8# are not shown in this example 9# 10# Any line which starts with a ; (semi-colon) or a # (hash) 11# is a comment and is ignored. In this example we will use a # 12# for commentary and a ; for parts of the config file that you 13# may wish to enable 14# 15# NOTE: Whenever you modify this file you should run the command 16# "testparm" to check that you have not many any basic syntactic 17# errors. 18# 19 20#======================= Global Settings ======================= 21 22[global] 23 24## Browsing/Identification ### 25 26# Change this to the workgroup/NT-domain name your Samba server will part of 27 workgroup = DEBIAN_FANS 28 29# server string is the equivalent of the NT Description field 30 server string = %h server (Samba %v) 31 32# Windows Internet Name Serving Support Section: 33# WINS Support - Tells the NMBD component of Samba to enable its WINS Server 34; wins support = no 35 36# WINS Server - Tells the NMBD components of Samba to be a WINS Client 37# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both 38; wins server = w.x.y.z 39 40# This will prevent nmbd to search for NetBIOS names through DNS. 41 dns proxy = no 42 43# What naming service and in what order should we use to resolve host names 44# to IP addresses 45; name resolve order = lmhosts host wins bcast 46 47 48#### Debugging/Accounting #### 49 50# This tells Samba to use a separate log file for each machine 51# that connects 52 log file = /var/log/samba/log.%m 53 54# Put a capping on the size of the log files (in Kb). 55 max log size = 1000 56 57# If you want Samba to only log through syslog then set the following 58# parameter to 'yes'. 59; syslog only = no 60 61# We want Samba to log a minimum amount of information to syslog. Everything 62# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log 63# through syslog you should set the following parameter to something higher. 64 syslog = 0 65 66# Do something sensible when Samba crashes: mail the admin a backtrace 67 panic action = /usr/share/samba/panic-action %d 68 69 70####### Authentication ####### 71 72# "security = user" is always a good idea. This will require a Unix account 73# in this server for every user accessing the server. See 74# /usr/share/doc/samba-doc/htmldocs/ServerType.html in the samba-doc 75# package for details. 76; security = user 77 78# You may wish to use password encryption. See the section on 79# 'encrypt passwords' in the smb.conf(5) manpage before enabling. 80 encrypt passwords = no 81 82# If you are using encrypted passwords, Samba will need to know what 83# password database type you are using. 84 passdb backend = tdbsam guest 85 86 obey pam restrictions = yes 87 88; guest account = nobody 89 invalid users = root 90 91# This boolean parameter controls whether Samba attempts to sync the Unix 92# password with the SMB password when the encrypted SMB password in the 93# passdb is changed. 94; unix password sync = no 95 96# For Unix password sync to work on a Debian GNU/Linux system, the following 97# parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for 98# sending the correct chat script for the passwd program in Debian Potato). 99 passwd program = /usr/bin/passwd %u 100 passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . 101 102# This boolean controls whether PAM will be used for password changes 103# when requested by an SMB client instead of the program listed in 104# 'passwd program'. The default is 'no'. 105; pam password change = no 106 107 108########## Printing ########## 109 110# If you want to automatically load your printer list rather 111# than setting them up individually then you'll need this 112; load printers = yes 113 114# lpr(ng) printing. You may wish to override the location of the 115# printcap file 116; printing = bsd 117; printcap name = /etc/printcap 118 119# CUPS printing. See also the cupsaddsmb(8) manpage in the 120# cupsys-client package. 121; printing = cups 122; printcap name = cups 123 124# When using [print$], root is implicitly a 'printer admin', but you can 125# also give this right to other users to add drivers and set printer 126# properties 127; printer admin = @ntadmin 128 129 130######## File sharing ######## 131 132# Name mangling options 133; preserve case = yes 134; short preserve case = yes 135 136 137############ Misc ############ 138 139# Using the following line enables you to customise your configuration 140# on a per machine basis. The %m gets replaced with the netbios name 141# of the machine that is connecting 142; include = /home/samba/etc/smb.conf.%m 143 144# Most people will find that this option gives better performance. 145# See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html 146# for details 147# You may want to add the following on a Linux system: 148# SO_RCVBUF=8192 SO_SNDBUF=8192 149 socket options = TCP_NODELAY 150 151# The following parameter is useful only if you have the linpopup package 152# installed. The samba maintainer and the linpopup maintainer are 153# working to ease installation and configuration of linpopup and samba. 154; message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' & 155 156# Domain Master specifies Samba to be the Domain Master Browser. If this 157# machine will be configured as a BDC (a secondary logon server), you 158# must set this to 'no'; otherwise, the default behavior is recommended. 159; domain master = auto 160 161# Some defaults for winbind (make sure you're not using the ranges 162# for something else.) 163; idmap uid = 10000-20000 164; idmap gid = 10000-20000 165; template shell = /bin/bash 166 167#======================= Share Definitions ======================= 168 169[homes] 170 comment = Home Directories 171 browseable = no 172 173# By default, the home directories are exported read-only. Change next 174# parameter to 'yes' if you want to be able to write to them. 175 writable = no 176 177# File creation mask is set to 0700 for security reasons. If you want to 178# create files with group=rw permissions, set next parameter to 0775. 179 create mask = 0700 180 181# Directory creation mask is set to 0700 for security reasons. If you want to 182# create dirs. with group=rw permissions, set next parameter to 0775. 183 directory mask = 0700 184 185# Un-comment the following and create the netlogon directory for Domain Logons 186# (you need to configure Samba to act as a domain controller too.) 187;[netlogon] 188; comment = Network Logon Service 189; path = /home/samba/netlogon 190; guest ok = yes 191; writable = no 192; share modes = no 193 194[printers] 195 comment = All Printers 196 browseable = no 197 path = /tmp 198 printable = yes 199 public = no 200 writable = no 201 create mode = 0700 202 203# Windows clients look for this share name as a source of downloadable 204# printer drivers 205[print$] 206 comment = Printer Drivers 207 path = /var/lib/samba/printers 208 browseable = yes 209 read only = yes 210 guest ok = no 211# Uncomment to allow remote administration of Windows print drivers. 212# Replace 'ntadmin' with the name of the group your admin users are 213# members of. 214; write list = root, @ntadmin 215 216# A sample share for sharing your CD-ROM with others. 217;[cdrom] 218; comment = Samba server's CD-ROM 219; writable = no 220; locking = no 221; path = /cdrom 222; public = yes 223 224# The next two parameters show how to auto-mount a CD-ROM when the 225# cdrom share is accesed. For this to work /etc/fstab must contain 226# an entry like this: 227# 228# /dev/scd0 /cdrom iso9660 defaults,noauto,ro,user 0 0 229# 230# The CD-ROM gets unmounted automatically after the connection to the 231# 232# If you don't want to use auto-mounting/unmounting make sure the CD 233# is mounted on /cdrom 234# 235; preexec = /bin/mount /cdrom 236; postexec = /bin/umount /cdrom 237 238