[global]
name resolve order = wins bcast hosts
netbios name = servidor-pdc
workgroup = dominio
time server = yes
security = user
map to guest = Bad User
os level = 100
wins support = yes
server string = Ubuntu Server
# hosts allow = 192.168.0.0/255.255.255.0
# remote announce = 192.168.0.255/dominio
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
idmap uid = 10000-20000
idmap uid = 10000-20000
winbind uid = 10000-20000
winbind gid = 10000-20000
template shell = /bin/false
passwd chat debug = yes
unix password sync = yes
username map = /etc/samba/smbusers
passdb backend = tdbsam
admin users = @sysadmin
unix password sync = yes
domain logons = yes
domain master = yes
preferred master = yes
local master = yes
log level = 3
max log size = 1000
log file = /var/log/samba/log.%m
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody -g maquinas %u
add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
delete user script = /usr/sbin/userdel %u
#shutdown script = /home/samba/bin/shutdown %m %t %r %f
add group script = /usr/sbin/groupadd %g
set primary group script = /usr/sbin/usermod -g %g %u
add user to group script = /usr/sbin/usermod -G %g %u
delete group script = /usr/sbin/groupdel %g
message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
#dfree command = /home/samba/bin/dfree.sh

# include = /home/samba/etc/smb.conf.%m

printing = CUPS
printcap name = CUPS
cups options = "raw media=a4"
load printers = yes
unix extensions = yes
unix charset = UTF8
display charset = cp850
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

logon script = KIX32.exe netlogon.kix
logon home = \\%L\profiles\%U
logon path = \\%L\profiles\%U
logon drive = U:
template homedir = /home/%U
usershare prefix allow list = /home /srv /media
usershare prefix deny list = /etc /dev /root /proc
csc policy = disable
enable privileges = yes
hide files = /desktop.ini/outlook*.lnk/*Briefcase*/
veto files = /*Security*/*.tmp/*root*/.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/

#======================= Lixeira =======================
recycle:directory_mode = 0770
recycle:exclude = *.tmp, *.temp, *.ldb, *.o, *.obj, ~*.*, *.bak
recycle:exclude_dir = tmp, temp, cache
recycle:facility = LOCAL1
recycle:keeptree = Yes
recycle:maxsize = 10000000
recycle:noversions = .ppt|*.dcl
recycle:priority = NOTICE
recycle:subdir_mode = 0770
recycle:touch = True
recycle:versions = Yes

#======================= Shares ========================

[printers]
comment = All Printers
browseable = no
path = /var/spool/samba
printable = yes
valid users = @publico
writable = yes
create mode = 777
write list = @sysadmin

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
admin users = @sysadmin @lpadmin
write list = @sysadmin
read list = @publico

[PDF]
comment = Impressora PDF ( cups-pdf )
path = /var/spool/samba
read only = No
create mask = 0770
printable = Yes
printer name = PDF
; oplocks = No
admin users = @sysadmin
write list = @sysadmin
read list = @publico

[homes]
comment = Home (Diretorio Pessoal)
valid users = %S
read only = no
browsable = no
create mode = 0700
veto files = /*.wmv/*.wav/*.mp3/*.vob/*.mov/*.iso/*.nrg/
vfs objects = recycle
recycle:repository = /home/%U/.Lixeira
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write

[netlogon]
comment = Servico de logon
path = /home/samba/netlogon
guest ok = yes
browseable = no
admin users = @sysadmin
write list = @sysadmin
vfs objects = recycle
recycle:repository = /home/samba/netlogon/.Lixeira/%U
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write
#root preexec = /home/samba/bin/powerlogon.sh %I %m %a %U %G

[profiles]
comment = Network Profiles Service
path = /home/samba/profiles/%U
read only = No
store dos attributes = Yes
create mask = 0600
directory mask = 0700
hide files = /desktop.ini/outlook*.lnk/*Briefcase*
browseable = no
vfs objects = recycle
recycle:repository = /home/samba/profiles/.Lixeira/%U
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write

[apps]
comment = Aplicativos globais
path = /home/samba/apps
guest ok = yes
browseable = no
create mask = 0775
directory mask = 0775
admin users = @sysadmin
write list = @sysadmin
read list = @users

[setup]
comment = Executáveis de instalação
path = /home/samba/setup
browseable = no
create mask = 0775
directory mask = 0775
admin users = @sysadmin
write list = @sysadmin
read list = @sysadmin

[financeiro]
comment = Dados do Departamento Financeiro
path = /home/samba/dados/financeiro
browseable = yes
writable = yes
read only = no
create mask = 0770
directory mask = 0770
admin users = @financeiro
write list = @financeiro
read list = @financeiro
vfs objects = recycle
recycle:repository = /home/samba/dados/.Lixeira/%U
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write

[gerencia]
comment = Dados da Equipe de Gerentes
path = /home/samba/dados/gerencia
browseable = yes
writable = yes
read only = no
create mask = 0770
directory mask = 0770
admin users = @gerencia
write list = @gerencia
read list = @gerencia
vfs objects = recycle
recycle:repository = /home/samba/dados/.Lixeira/%U
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write

[comercial]
comment = Dados da Equipe de Vendas
path = /home/samba/dados/comercial
browseable = yes
writable = yes
read only = no
create mask = 0770
directory mask = 0770
admin users = @comercial
write list = @comercial
read list = @comercial
vfs objects = recycle
recycle:repository = /home/samba/dados/.Lixeira/%U
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write

[marketing]
comment = Dados da Equipe de Marketing
path = /home/samba/dados/marketing
browseable = yes
writable = yes
read only = no
create mask = 0770
directory mask = 0770
admin users = @marketing
write list = @marketing
read list = @marketing
vfs objects = recycle
recycle:repository = /home/samba/dados/.Lixeira/%U
vfs objects = full_audit
full_audit:facility = LOCAL5
full_audit:failure = close closedir mkdir open opendir rename rmdir write
full_audit:prefix = %U|%I|%P
full_audit:priority = ALERT
full_audit:success = close mkdir open rename rmdir write