1 | # This is the main Samba configuration file. You should read the
|
---|
2 | # smb.conf(5) manual page in order to understand the options listed
|
---|
3 | # here. Samba has a huge number of configurable options (perhaps too
|
---|
4 | # many!) most of which are not shown in this example
|
---|
5 | #
|
---|
6 | # For a step to step guide on installing, configuring and using samba,
|
---|
7 | # read the Samba-HOWTO-Collection. This may be obtained from:
|
---|
8 | # http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
|
---|
9 | #
|
---|
10 | # Many working examples of smb.conf files can be found in the
|
---|
11 | # Samba-Guide which is generated daily and can be downloaded from:
|
---|
12 | # http://www.samba.org/samba/docs/Samba-Guide.pdf
|
---|
13 | #
|
---|
14 | # Any line which starts with a ; (semi-colon) or a # (hash)
|
---|
15 | # is a comment and is ignored. In this example we will use a #
|
---|
16 | # for commentry and a ; for parts of the config file that you
|
---|
17 | # may wish to enable
|
---|
18 | #
|
---|
19 | # NOTE: Whenever you modify this file you should run the command "testparm"
|
---|
20 | # to check that you have not made any basic syntactic errors.
|
---|
21 | #
|
---|
22 | #======================= Global Settings =====================================
|
---|
23 | [global]
|
---|
24 |
|
---|
25 | # workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
|
---|
26 | workgroup = MYGROUP
|
---|
27 |
|
---|
28 | # server string is the equivalent of the NT Description field
|
---|
29 | server string = Samba Server
|
---|
30 |
|
---|
31 | # Security mode. Defines in which mode Samba will operate. Possible
|
---|
32 | # values are share, user, server, domain and ads. Most people will want
|
---|
33 | # user level security. See the Samba-HOWTO-Collection for details.
|
---|
34 | security = user
|
---|
35 |
|
---|
36 | # This option is important for security. It allows you to restrict
|
---|
37 | # connections to machines which are on your local network. The
|
---|
38 | # following example restricts access to two C class networks and
|
---|
39 | # the "loopback" interface. For more examples of the syntax see
|
---|
40 | # the smb.conf man page
|
---|
41 | ; hosts allow = 192.168.1. 192.168.2. 127.
|
---|
42 |
|
---|
43 | # If you want to automatically load your printer list rather
|
---|
44 | # than setting them up individually then you'll need this
|
---|
45 | load printers = yes
|
---|
46 |
|
---|
47 | # you may wish to override the location of the printcap file
|
---|
48 | ; printcap name = /etc/printcap
|
---|
49 |
|
---|
50 | # on SystemV system setting printcap name to lpstat should allow
|
---|
51 | # you to automatically obtain a printer list from the SystemV spool
|
---|
52 | # system
|
---|
53 | ; printcap name = lpstat
|
---|
54 |
|
---|
55 | # It should not be necessary to specify the print system type unless
|
---|
56 | # it is non-standard. Currently supported print systems include:
|
---|
57 | # bsd, cups, sysv, plp, lprng, aix, hpux, qnx
|
---|
58 | ; printing = cups
|
---|
59 |
|
---|
60 | # Uncomment this if you want a guest account, you must add this to /etc/passwd
|
---|
61 | # otherwise the user "nobody" is used
|
---|
62 | ; guest account = pcguest
|
---|
63 |
|
---|
64 | # this tells Samba to use a separate log file for each machine
|
---|
65 | # that connects
|
---|
66 | log file = /usr/local/samba/var/log.%m
|
---|
67 |
|
---|
68 | # Put a capping on the size of the log files (in Kb).
|
---|
69 | max log size = 50
|
---|
70 |
|
---|
71 | # Use password server option only with security = server
|
---|
72 | # The argument list may include:
|
---|
73 | # password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
|
---|
74 | # or to auto-locate the domain controller/s
|
---|
75 | # password server = *
|
---|
76 | ; password server = <NT-Server-Name>
|
---|
77 |
|
---|
78 | # Use the realm option only with security = ads
|
---|
79 | # Specifies the Active Directory realm the host is part of
|
---|
80 | ; realm = MY_REALM
|
---|
81 |
|
---|
82 | # Backend to store user information in. New installations should
|
---|
83 | # use either tdbsam or ldapsam. smbpasswd is available for backwards
|
---|
84 | # compatibility. tdbsam requires no further configuration.
|
---|
85 | ; passdb backend = tdbsam
|
---|
86 |
|
---|
87 | # Using the following line enables you to customise your configuration
|
---|
88 | # on a per machine basis. The %m gets replaced with the netbios name
|
---|
89 | # of the machine that is connecting.
|
---|
90 | # Note: Consider carefully the location in the configuration file of
|
---|
91 | # this line. The included file is read at that point.
|
---|
92 | ; include = /usr/local/samba/lib/smb.conf.%m
|
---|
93 |
|
---|
94 | # Configure Samba to use multiple interfaces
|
---|
95 | # If you have multiple network interfaces then you must list them
|
---|
96 | # here. See the man page for details.
|
---|
97 | ; interfaces = 192.168.12.2/24 192.168.13.2/24
|
---|
98 |
|
---|
99 | # Browser Control Options:
|
---|
100 | # set local master to no if you don't want Samba to become a master
|
---|
101 | # browser on your network. Otherwise the normal election rules apply
|
---|
102 | ; local master = no
|
---|
103 |
|
---|
104 | # OS Level determines the precedence of this server in master browser
|
---|
105 | # elections. The default value should be reasonable
|
---|
106 | ; os level = 33
|
---|
107 |
|
---|
108 | # Domain Master specifies Samba to be the Domain Master Browser. This
|
---|
109 | # allows Samba to collate browse lists between subnets. Don't use this
|
---|
110 | # if you already have a Windows NT domain controller doing this job
|
---|
111 | ; domain master = yes
|
---|
112 |
|
---|
113 | # Preferred Master causes Samba to force a local browser election on startup
|
---|
114 | # and gives it a slightly higher chance of winning the election
|
---|
115 | ; preferred master = yes
|
---|
116 |
|
---|
117 | # Enable this if you want Samba to be a domain logon server for
|
---|
118 | # Windows95 workstations.
|
---|
119 | ; domain logons = yes
|
---|
120 |
|
---|
121 | # if you enable domain logons then you may want a per-machine or
|
---|
122 | # per user logon script
|
---|
123 | # run a specific logon batch file per workstation (machine)
|
---|
124 | ; logon script = %m.bat
|
---|
125 | # run a specific logon batch file per username
|
---|
126 | ; logon script = %U.bat
|
---|
127 |
|
---|
128 | # Where to store roving profiles (only for Win95 and WinNT)
|
---|
129 | # %L substitutes for this servers netbios name, %U is username
|
---|
130 | # You must uncomment the [Profiles] share below
|
---|
131 | ; logon path = \\%L\Profiles\%U
|
---|
132 |
|
---|
133 | # Windows Internet Name Serving Support Section:
|
---|
134 | # WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
|
---|
135 | ; wins support = yes
|
---|
136 |
|
---|
137 | # WINS Server - Tells the NMBD components of Samba to be a WINS Client
|
---|
138 | # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
|
---|
139 | ; wins server = w.x.y.z
|
---|
140 |
|
---|
141 | # WINS Proxy - Tells Samba to answer name resolution queries on
|
---|
142 | # behalf of a non WINS capable client, for this to work there must be
|
---|
143 | # at least one WINS Server on the network. The default is NO.
|
---|
144 | ; wins proxy = yes
|
---|
145 |
|
---|
146 | # DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
|
---|
147 | # via DNS nslookups. The default is NO.
|
---|
148 | dns proxy = no
|
---|
149 |
|
---|
150 | # These scripts are used on a domain controller or stand-alone
|
---|
151 | # machine to add or delete corresponding unix accounts
|
---|
152 | ; add user script = /usr/sbin/useradd %u
|
---|
153 | ; add group script = /usr/sbin/groupadd %g
|
---|
154 | ; add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u
|
---|
155 | ; delete user script = /usr/sbin/userdel %u
|
---|
156 | ; delete user from group script = /usr/sbin/deluser %u %g
|
---|
157 | ; delete group script = /usr/sbin/groupdel %g
|
---|
158 |
|
---|
159 |
|
---|
160 | #============================ Share Definitions ==============================
|
---|
161 | [homes]
|
---|
162 | comment = Home Directories
|
---|
163 | browseable = no
|
---|
164 | writable = yes
|
---|
165 |
|
---|
166 | # Un-comment the following and create the netlogon directory for Domain Logons
|
---|
167 | ; [netlogon]
|
---|
168 | ; comment = Network Logon Service
|
---|
169 | ; path = /usr/local/samba/lib/netlogon
|
---|
170 | ; guest ok = yes
|
---|
171 | ; writable = no
|
---|
172 | ; share modes = no
|
---|
173 |
|
---|
174 |
|
---|
175 | # Un-comment the following to provide a specific roving profile share
|
---|
176 | # the default is to use the user's home directory
|
---|
177 | ;[Profiles]
|
---|
178 | ; path = /usr/local/samba/profiles
|
---|
179 | ; browseable = no
|
---|
180 | ; guest ok = yes
|
---|
181 |
|
---|
182 |
|
---|
183 | # NOTE: If you have a BSD-style print system there is no need to
|
---|
184 | # specifically define each individual printer
|
---|
185 | [printers]
|
---|
186 | comment = All Printers
|
---|
187 | path = /usr/spool/samba
|
---|
188 | browseable = no
|
---|
189 | # Set public = yes to allow user 'guest account' to print
|
---|
190 | guest ok = no
|
---|
191 | writable = no
|
---|
192 | printable = yes
|
---|
193 |
|
---|
194 | # This one is useful for people to share files
|
---|
195 | ;[tmp]
|
---|
196 | ; comment = Temporary file space
|
---|
197 | ; path = /tmp
|
---|
198 | ; read only = no
|
---|
199 | ; public = yes
|
---|
200 |
|
---|
201 | # A publicly accessible directory, but read only, except for people in
|
---|
202 | # the "staff" group
|
---|
203 | ;[public]
|
---|
204 | ; comment = Public Stuff
|
---|
205 | ; path = /home/samba
|
---|
206 | ; public = yes
|
---|
207 | ; writable = no
|
---|
208 | ; printable = no
|
---|
209 | ; write list = @staff
|
---|
210 |
|
---|
211 | # Other examples.
|
---|
212 | #
|
---|
213 | # A private printer, usable only by fred. Spool data will be placed in fred's
|
---|
214 | # home directory. Note that fred must have write access to the spool directory,
|
---|
215 | # wherever it is.
|
---|
216 | ;[fredsprn]
|
---|
217 | ; comment = Fred's Printer
|
---|
218 | ; valid users = fred
|
---|
219 | ; path = /homes/fred
|
---|
220 | ; printer = freds_printer
|
---|
221 | ; public = no
|
---|
222 | ; writable = no
|
---|
223 | ; printable = yes
|
---|
224 |
|
---|
225 | # A private directory, usable only by fred. Note that fred requires write
|
---|
226 | # access to the directory.
|
---|
227 | ;[fredsdir]
|
---|
228 | ; comment = Fred's Service
|
---|
229 | ; path = /usr/somewhere/private
|
---|
230 | ; valid users = fred
|
---|
231 | ; public = no
|
---|
232 | ; writable = yes
|
---|
233 | ; printable = no
|
---|
234 |
|
---|
235 | # a service which has a different directory for each machine that connects
|
---|
236 | # this allows you to tailor configurations to incoming machines. You could
|
---|
237 | # also use the %U option to tailor it by user name.
|
---|
238 | # The %m gets replaced with the machine name that is connecting.
|
---|
239 | ;[pchome]
|
---|
240 | ; comment = PC Directories
|
---|
241 | ; path = /usr/pc/%m
|
---|
242 | ; public = no
|
---|
243 | ; writable = yes
|
---|
244 |
|
---|
245 | # A publicly accessible directory, read/write to all users. Note that all files
|
---|
246 | # created in the directory by users will be owned by the default user, so
|
---|
247 | # any user with access can delete any other user's files. Obviously this
|
---|
248 | # directory must be writable by the default user. Another user could of course
|
---|
249 | # be specified, in which case all files would be owned by that user instead.
|
---|
250 | ;[public]
|
---|
251 | ; path = /usr/somewhere/else/public
|
---|
252 | ; public = yes
|
---|
253 | ; only guest = yes
|
---|
254 | ; writable = yes
|
---|
255 | ; printable = no
|
---|
256 |
|
---|
257 | # The following two entries demonstrate how to share a directory so that two
|
---|
258 | # users can place files there that will be owned by the specific users. In this
|
---|
259 | # setup, the directory should be writable by both users and should have the
|
---|
260 | # sticky bit set on it to prevent abuse. Obviously this could be extended to
|
---|
261 | # as many users as required.
|
---|
262 | ;[myshare]
|
---|
263 | ; comment = Mary's and Fred's stuff
|
---|
264 | ; path = /usr/somewhere/shared
|
---|
265 | ; valid users = mary fred
|
---|
266 | ; public = no
|
---|
267 | ; writable = yes
|
---|
268 | ; printable = no
|
---|
269 | ; create mask = 0765
|
---|
270 |
|
---|
271 |
|
---|