# Warning: This file is auto-generated and might be overwritten by
#          univention-config-registry.
#          Please edit the following file(s) instead:
# Warnung: Diese Datei wurde automatisch generiert und kann durch
#          univention-config-registry ueberschrieben werden.
#          Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en):
#
#       /etc/univention/templates/files/etc/samba/smb.conf.d/10global
#       /etc/univention/templates/files/etc/samba/smb.conf.d/11univention-smb-service
#       /etc/univention/templates/files/etc/samba/smb.conf.d/21univention-samba_winbind
#       /etc/univention/templates/files/etc/samba/smb.conf.d/31univention-samba_password
#       /etc/univention/templates/files/etc/samba/smb.conf.d/41univention-samba_printing
#       /etc/univention/templates/files/etc/samba/smb.conf.d/51univention-samba_domain
#       /etc/univention/templates/files/etc/samba/smb.conf.d/61univention-samba_misc
#       /etc/univention/templates/files/etc/samba/smb.conf.d/71univention-samba_users
#       /etc/univention/templates/files/etc/samba/smb.conf.d/81univention-quota_scripts
#       /etc/univention/templates/files/etc/samba/smb.conf.d/90univention-samba_user_shares
#       /etc/univention/templates/files/etc/samba/smb.conf.d/91univention-samba_shares
#       /etc/univention/templates/files/etc/samba/smb.conf.d/92univention-samba_shares
#       /etc/univention/templates/files/etc/samba/smb.conf.d/95univention-samba_local_config
#       /etc/univention/templates/files/etc/samba/smb.conf.d/99univention-samba_local_shares
#

; ---------------------<10global>------------------------
[global]
        debug level     = 1
        logging         = file
        max log size    = 0

        netbios name    = Myrtille
        server role     = active directory domain controller
        name resolve order      = wins host bcast
        server string   = Univention Corporate Server
        server services = -dns -smb +s3fs -nbt
        server role check:inhibit = yes
        # use nmbd; to disable set samba4/service/nmb to s4
        nmbd_proxy_logon:cldap_server=127.0.0.1
        workgroup       = HOME
        realm           = HOME.BROUWERS.US

        tls enabled     = yes
        tls keyfile     = /etc/univention/ssl/Myrtille.home.brouwers.us/private.key
        tls certfile    = /etc/univention/ssl/Myrtille.home.brouwers.us/cert.pem
        tls cafile      = /etc/univention/ssl/ucsCA/CAcert.pem
        tls verify peer = ca_and_name
        ldap server require strong auth = allow_sasl_over_tls
        dsdb:schema update allowed = no
        max open files = 32808
        interfaces      = lo eth0
        bind interfaces only    = yes
        ntlm auth       = ntlmv2-only
        machine password timeout        = 0
        acl allow execute always = True
        kccsrv:samba_kcc = False

; ---------------------</10global>------------------------
; ---------------------<smb service configuration>-----------------------

        debug hirestimestamp = yes
        debug pid = yes
; ---------------------</smb service configuration>----------------------


        ; idmap/winbind

        winbind separator = +
        template shell = /bin/bash
        template homedir = /home/%D-%U

        idmap config * : backend = tdb
        idmap config * : range = 300000-400000

        passwd chat = *New*password* %n\n *Re-enter*new*password* %n\n *password*changed*

        obey pam restrictions = yes
        encrypt passwords = yes

        spoolss: architecture = Windows x64

        ; domain service lookup related settings
        preferred master = yes
        local master = yes
        domain master = yes
        wins support = yes

        ; miscellaneous settings, mostly for file services
        oplocks = yes
        large readwrite = yes
        read raw = yes
        write raw = yes
        max xmit = 65535
        acl:search = no
        host msdfs = yes
        kernel oplocks = yes
        deadtime = 15
        getwd cache = yes
        wide links = no
        store dos attributes = yes
        logon home = \\Myrtille\%U
        logon drive = I:
        logon path = \\Myrtille\%U\windows-profiles\%a
        preserve case = yes
        short preserve case = yes

        guest account = nobody
        map to guest = Bad User
        admin users = administrator join-backup


        usershare max shares = 0


; -----------------------------------------------------------------------------------------------------------
        include = /etc/samba/base.conf




        include = /etc/samba/local.conf