牛大叔．生活隨筆

[global]

  netbios name = smbserver
  workgroup = smb

  encrypt passwords = yes

  passdb backend = smbpasswd:/var/lib/samba/private/smbpasswd

  os level = 65
  wins support = yes
  preferred master = yes
  domain master = yes
  local master = yes
  security = user
  domain logons = yes
  logon path = \\%N\profiles\%U\%a
  logon drive = H:
  logon home = \\smb\%U\winprofile
  logon script = logon.vbs

 add machine script = /usr/sbin/useradd -c machines -d /var/lib/nobody -u 999 -g 1005 -s /bin/false %m$
  socket options = IPTOS_LOWDELAY TCP_NODELAY
  enable privileges = yes

#lo net 指令才能連上
  interfaces = lo eth0 192.168.1.130
  hosts allow = 192.168.1. 120.0.0.1
  bind interfaces only = Yes
  client ntlmv2 auth = yes
  lanman auth = yes
  ntlm auth = Yes
  name resolve order = bcast host lmhosts wins

[netlogon]
  path = /var/lib/samba/netlogon/
  guest ok = yes
  read only = yes

[profiles]
  path = /var/lib/samba/profiles
  read only = no
  create mask = 0600
  directory mask = 0700
  browseable = no
  inherit permissions = yes
  root preexec = /etc/samba/chk_profiles.sh %u %g

[homes]
  comment = Home directories
  browseable = no
  writable = yes
  valid users = %S
  create mode = 0664
  directory mode = 0775

#!/bin/bash

usr=$1
grp=$2

PROFILE=/var/lib/samba/profiles/$usr;
if [ ! -e $PROFILE ]; then
 mkdir -pm700 $PROFILE; chown $usr:$grp $PROFILE;
fi