[global]
    server string       = %h
    workgroup           = MY-DOMAIN
    netbios name        = PDC
    security            = user

    enable privileges   = yes
    load printers       = yes
    printing            = cups
    printcap name       = cups
    guest account       = nobody

    log level           = 3 passdb:5 auth:10 winbind:10
    log file            = /var/log/samba/log.%m
    max log size        = 500

    syslog              = 0
    lock directory      = /var/lock/samba
    private dir         = /etc/samba/private
    dont descend        = /proc,/dev,/etc,/lib,/lost+found,/initrd

    socket options      = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

    interfaces          = lo eth0
    bind interfaces only= yes
    smb ports           = 139

  local master        = yes
    os level            = 255
    domain master       = yes
    preferred master    = yes
    domain logons       = yes
    host msdfs          = yes

    username level      = 8
    logon drive         = r:
    logon script        = defuser.bat
    logon home          =
    logon path          =

    wins support        = no
  add user script          = /etc/smbldap-tools/smbldap-useradd -a -m %u
    add group script         = /etc/smbldap-tools/smbldap-groupadd -a %g
    add machine script       = /etc/smbldap-tools/smbldap-useradd -t 0 -w  -c "Winstation" -d /dev/null %u

username map            = /etc/samba/smbusers
passdb backend          = ldapsam:ldap://127.0.0.1
passdb expand explicit  = no

idmap uid       = 10000-50000
idmap gid       = 10000-50000

ldap ssl            = off
ldap passwd sync    = Yes
ldap delete dn      = Yes
ldapsam:trusted     = Yes
ldap suffix         = ou=co,o=my-domain,c=su
ldap idmap suffix   = ou=Idmap
ldap group suffix   = ou=Groups
ldap user suffix    = ou=Users
ldap machine suffix = ou=Winstations
ldap admin dn       = cn=Manager,ou=co,o=my-domain,c=su

winbind separator   = /
winbind enum users  = yes
winbind enum groups = yes
winbind use default domain = yes
template homedir    = /home/users/winnt/%U
template shell      = /bin/bash
#-----------------------------------------------------------------------------

#============================ Share Definitions ==============================
[homes]
    comment = Home Directories
    browseable = no
    writable = yes
    valid users = %S
    hide files  = /.*/Maildir/encodings/GNUstep/
    veto files  = /.*/Maildir/encodings/GNUstep/
    delete veto files   = no
    vfs object          = recycle
    recycle:repository  = /home/exports/exgate/recycled/%u
    recycle:keeptree    = Yes
    recycle:touch       = Yes
    recycle:directory_mode = 0700
    recycle:subdir_mode    = 0700
    recycle:maxsize     = 104857600
    recycle:exclude     = *.tmp|*.temp|*.o|*.obj|~$*|*.~??
    recycle:excludedir  = /tmp|/temp|/cache
    recycle:versions    = Yes
    recycle:noversions  = *.doc|*.xls|*.ppt

[netlogon]
   comment = Network Logon Service
   path = /home/exports/samba/netlogon
   volume              = NETLOGON
   guest ok            = yes
   read only           = yes
   share modes         = no
   force group            = +staff