[Samba] netlogon sometimes works (corrected with smb.conf attached)
jason.walton at nomadsoft.com
jason.walton at nomadsoft.com
Mon Jan 20 18:28:01 GMT 2003
apologies, the smb.conf keeps on going astray, here it is (hopefully)
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
"testparm"
# to check that you have not many any basic syntactic errors.
#
#======================= Global Settings
=====================================
[global]
##
## Basic Server Settings
##
netbios name = PDC
netbios aliases = FILESERVER
workgroup = NOMAD
server string = Nomad PDC (Samba %v)
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
hosts allow = 192.168.2. 192.168.1. 127.0.0.1
# Uncomment this if you want a guest account, you must add this to
/etc/passwd
# otherwise the user "nobody" is used
; guest account = pcguest
# this tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/log.%m
# How much information do you want to see in the logs?
# default is only to log critical messages
log level = 1
# Put a capping on the size of the log files (in Kb).
max log size = 10250
# Security mode. Most people will want user level security. See
# security_level.txt for details.
security = user
domain admin group = root administrator @sysadm
##
## Network Browsing
##
# set local master to no if you don't want Samba to become a
master
# browser on your network. Otherwise the normal election rules
apply
local master = yes
# OS Level determines the precedence of this server in master
browser
# elections. The default value (20) should be reasonable
os level = 99
# Domain Master specifies Samba to be the Domain Master Browser.
This
# allows Samba to collate browse lists between subnets. Don't use
this
# if you already have a Windows NT domain controller doing this
job
domain master = yes
# Preferred Master causes Samba to force a local browser election
on startup
# and gives it a slightly higher chance of winning the election
preferred master = yes
remote browse sync = 192.168.1.3
##
## WINS & Name Resolution
##
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's
WINS Server
wins support = yes
# WINS Server - Tells the NMBD components of Samba to be a WINS
Client
# Note: Samba can be either a WINS Server, or a WINS Client,
but NOT both
; wins server = w.x.y.z
# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must
be
# at least one WINS Server on the network. The default is NO.
; wins proxy = yes
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS
names
# via DNS nslookups.
dns proxy = no
##
## Passwords & Authentication
##
add user script = /usr/sbin/useradd -d /dev/null -g 400 -s
/bin/false %u
# Use password server option only with security = server
# The argument list may include:
# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
; password server = *
; password server = <NT-Server-Name>
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba
documentation.
# Do not enable this option unless you have read those documents
encrypt passwords = yes
# Should smbd obey the session and account lines in
/etc/pam.d/samba ?
# only available if --with-pam was used at compile time
; obey pam restrictions = yes
# When using encrypted passwords, Samba can synchronize the local
# UNIX password as well. You will also need the "passwd chat"
parameters
unix password sync = yes
# how should smbd talk to the local system when changing a UNIX
# password? See smb.conf(5) for details
passwd program = /usr/bin/passwd -r nis %u
# define this as a standard, as it bloody moves around!
smb passwd file = /opt/private/smbpasswd
# define how the password is mapped via NIS
# now define the NIS MASTER method
passwd chat = New*password:* %n\n \n*Re-enter*new*password:* %n\n
\n*NIS*passwd/attributes*changed*on**
passwd chat debug = no
##
## Domain Control
##
admin users = root
# Enable this if you want Samba act as a domain controller.
# make sure you have read the Samba-PDC-HOWTO included in the
documentation
# before enabling this parameter
domain logons = yes
# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
logon script = %G.bat
# Where to store roving profiles (only for Win95 and WinNT)
# %L substitutes for this servers netbios name, %U is
username
# You must uncomment the [Profiles] share below
logon path = \\%L\Profiles\%U
##
## Printing
##
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
load printers = yes
# you may wish to override the location of the printcap file
; printcap name = /etc/printcap
# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV
spool
# system
; printcap name = lpstat
# It should not be necessary to specify the print system type
unless
# it is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
; printing = bsd
# Enable this to make Samba 2.2 behavior just like Samba 2.0
# not recommended nuless you are sure of what you are doing
; disable spoolss = yes
# list of users and groups which should be able to remotely manage
# printer drivers installed on the server
; printer admin = root, +ntadmin
#============================ Share Definitions
==============================
[homes]
create mode = 0600
directory mode = 0700
comment = Home Directories
browseable = no
writable = yes
;JOW20021113 valid users = %S
path = /share/homes/%U
; path = %H
# Un-comment the following and create the netlogon directory for Domain
Logons
[NETLOGON]
path = /profiles/netlogon
comment = Network Logon Service
guest ok = yes
writeable = yes
#JOW2003/01/15 writable = no
share modes = yes
# share modes = no
write list = administrator, @sysadm
preexec = echo %u %H %U %G >> /tmp/logon.netlogon
# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
[Profiles]
path = /profiles
writeable = yes
read only = No
browseable = yes
guest ok = yes
profile acls = yes
preexec = echo %u %H %U %G >> /tmp/logon.profiles
-------------- next part --------------
HTML attachment scrubbed and removed
More information about the samba
mailing list