1 # NOTE: Whenever you modify this file you should run the command "testparm"
2 # to check that you have not made any basic syntactic errors.
6 # If you want to use the useradd/groupadd family of binaries please run:
7 # setsebool -P samba_domain_controller on
9 # If you want to share home directories via samba please run:
10 # setsebool -P samba_enable_home_dirs on
12 # If you create a new directory you want to share you should mark it as
13 # "samba_share_t" so that selinux will let you write into it.
14 # Make sure not to do that on system directories as they may already have
15 # been marked with othe SELinux labels.
17 # Use ls -ldZ /path to see which context a directory has
19 # Set labels only on directories you created!
20 # To set a label use the following: chcon -t samba_share_t /path
22 # If you need to share a system created directory you can use one of the
23 # following (read-only/read-write):
24 # setsebool -P samba_export_all_ro on
26 # setsebool -P samba_export_all_rw on
28 # If you want to run scripts (preexec/root prexec/print command/...) please
29 # put them into the /var/lib/samba/scripts directory so that smbd will be
30 # allowed to run them.
31 # Make sure you COPY them and not MOVE them so that the right SELinux context
32 # is applied, to check all is ok use restorecon -R -v /var/lib/samba/scripts
36 #======================= Global Settings =====================================
43 display charset = UTF8
45 dont descend = /proc,/dev
48 force directory mode = 0750
49 force create mode = 0640
56 veto files = /._*/.DS_Store/.AppleDouble/.AppleDB/.AppleDesktop/Network Trash Folder/
57 delete veto files = yes
62 server string = Eutheria
64 ; interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
65 ; hosts allow = 127. 192.168.12. 192.168.13.
66 # logs split per machine
67 log file = /var/log/samba/log.%m
68 # max 50KB per log file, then rotate
71 passdb backend = tdbsam
72 # use either tdbsam or ldapsam. smbpasswd is available for backwards
73 # compatibility. tdbsam requires no further configuration.
81 ; store dos attributes = yes
84 ; comment = Home Directories
88 ; valid users = MYDOMAIN\%S
90 # A publicly accessible directory, but read only, except for people in
93 ; comment = Public Stuff
101 comment = Home Directories
102 path = /share/users/%S
107 directory mask = 0755
117 directory mask = 0775
129 directory mask = 0775
136 directory mask = 0755
141 valid users = @guests
145 directory mask = 0775