[Samba] Samba on Debian 8; NT4 domain, win10

[Stefan G. Weichinger]

Am 2016-11-28 um 11:19 schrieb Rowland Penny via samba:

> In English, this means 'what is to the right of 'passd backend =' in
> smb.conf
> 
> So, at this point, it might help if you posted your smb.conf.

ok, not so busy anymore. no real need to anonymize anything, here the
smb.conf of the NT4-samba-PDC without [shares]

(yes, it could be streamlined a bit, sure)

[global]
        # Default options
        browseable                     = yes
        create mask                    = 0660
        deadtime                       = 10
        directory mask                 = 0770
        disable spoolss                = yes
        dns proxy                      = no
        dont descend                   = ./lost+found
        encrypt passwords              = yes
        guest account                  = nobody
        hide files                     = /.*/lost+found/
        hide unreadable                = yes
        invalid users                  = root bin daemon adm sync
shutdown halt mail news uucp proxy www-data backup sshd
        load printers                  = no
        locking                        = yes
        log file                       = /var/log/samba/log.%m
        map to guest                   = bad user
        max log size                   = 1000
        name resolve order             = lmhosts host wins bcast
        netbios name                   = SERVER
        obey pam restrictions          = yes
        passdb backend                 = tdbsam
        printcap name                  = /dev/null
        printing                       = bsd
        security                       = user
        server string                  = %h file server
        domain logons = Yes
        show add printer wizard        = no
        syslog                         = 0
        unix charset                   = UTF8
        unix password sync             = no
        use sendfile                   = yes
        workgroup                      = BUERO

        server max protocol = NT1
        acl allow execute always = Yes

        os level = 80
        preferred master = Yes
        domain master = Yes
        wins support = Yes

        log level = 2

        add user script = /usr/sbin/useradd -m %u
        add group script = /usr/sbin/groupadd %g
        add user to group script = /usr/sbin/usermod -G %g %u
        add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
        unix extensions = no

        # turn off roaming profiles
        logon path = ""
        logon home = ""