Unix_name = SMB_name1 SMB_name2 ...

root = administrator admin

nobody = guest pcguest smbguest

cat

#======================= Global Settings =====================================

[global]

workgroup = NT-Domain-Name or Workgroup-Name

workgroup = workgroup

server string is the equivalent of the NT Description field

server string = Samba Server

This option is important for security. It allows you to restrict

connections to machines which are on your local network. The

following example restricts access to two C class networks and

the "loopback" interface. For more examples of the syntax see

the smb.conf man page

hosts allow = 192.168.1. 192.168.2. 127.0.0.1 192.168.0.200 192.168.0.250

if you want to automatically load your printer list rather

than setting them up individually then you'll need this

printcap name = /etc/printcap

load printers = yes

It should not be necessary to spell out the print system type unless

yours is non-standard. Currently supported print systems include:

bsd, sysv, plp, lprng, aix, hpux, qnx

printing = lprng

Uncomment this if you want a guest account, you must add this to /etc/passwd

otherwise the user "nobody" is used

guest account = root

this tells Samba to use a separate log file for each machine

that connects

log file = /var/log/samba/%m.log

Put a capping on the size of the log files (in Kb).

max log size = 0

Security mode. Most people will want user level security. See

security_level.txt for details.

security = user

Use password server option only with security = server

The argument list may include:

password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]

or to auto-locate the domain controller/s

password server = *

; password server =

  1<nt-server-name>   
  2  
  3  
  4  
  5# Password Level allows matching of _n_ characters of the password for   
  6  
  7# all combinations of upper and lower case.   
  8  
  9; password level = 8   
 10  
 11; username level = 8   
 12  
 13  
 14  
 15# You may wish to use password encryption. Please read   
 16  
 17# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.   
 18  
 19# Do not enable this option unless you have read those documents   
 20  
 21encrypt passwords = yes   
 22  
 23smb passwd file = /etc/samba/smbpasswd   
 24  
 25  
 26  
 27# The following is needed to keep smbclient from spouting spurious errors   
 28  
 29# when Samba is built with support for SSL.   
 30  
 31; ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt   
 32  
 33  
 34  
 35# The following are needed to allow password changing from Windows to   
 36  
 37# update the Linux sytsem password also.   
 38  
 39# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.   
 40  
 41# NOTE2: You do NOT need these to allow workstations to change only   
 42  
 43# the encrypted SMB passwords. They allow the Unix password   
 44  
 45# to be kept in sync with the SMB password.   
 46  
 47unix password sync = Yes   
 48  
 49passwd program = /usr/bin/passwd %u   
 50  
 51passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*aut   
 52  
 53hentication*tokens*updated*successfully*   
 54  
 55  
 56  
 57# You can use PAM's password change control flag for Samba. If   
 58  
 59# You can use PAM's password change control flag for Samba. If   
 60  
 61# enabled, then PAM will be used for password changes when requested   
 62  
 63# by an SMB client instead of the program listed in passwd program.   
 64  
 65# It should be possible to enable this without changing your passwd   
 66  
 67# chat parameter for most setups.   
 68  
 69  
 70  
 71pam password change = yes   
 72  
 73  
 74  
 75# Unix users can map to different SMB User names   
 76  
 77; username map = /etc/samba/smbusers   
 78  
 79  
 80  
 81# Using the following line enables you to customise your configuration   
 82  
 83# on a per machine basis. The %m gets replaced with the netbios name   
 84  
 85# of the machine that is connecting   
 86  
 87; include = /etc/samba/smb.conf.%m   
 88  
 89  
 90  
 91# This parameter will control whether or not Samba should obey PAM's   
 92  
 93# account and session management directives. The default behavior is   
 94  
 95# to use PAM for clear text authentication only and to ignore any   
 96  
 97# account or session management. Note that Samba always ignores PAM   
 98  
 99# for authentication in the case of encrypt passwords = yes   
100  
101  
102  
103obey pam restrictions = yes   
104  
105  
106  
107# Most people will find that this option gives better performance.   
108  
109# See speed.txt and the manual pages for details   
110  
111socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192   
112  
113  
114  
115# Configure Samba to use multiple interfaces   
116  
117# If you have multiple network interfaces then you must list them   
118  
119# here. See the man page for details.   
120  
121; interfaces = 192.168.12.2/24 192.168.13.2/24   
122  
123  
124  
125# Configure remote browse list synchronisation here   
126  
127# request announcement to, or browse list sync from:   
128  
129# a specific host or from / to a whole subnet (see below)   
130  
131; remote browse sync = 192.168.3.25 192.168.5.255   
132  
133# Cause this host to announce itself to local subnets here   
134  
135; remote announce = 192.168.1.255 192.168.2.44   
136  
137  
138  
139# Browser Control Options:   
140  
141# set local master to no if you don't want Samba to become a master   
142  
143# browser on your network. Otherwise the normal election rules apply   
144  
145; local master = no   
146  
147  
148  
149# OS Level determines the precedence of this server in master browser   
150  
151# elections. The default value should be reasonable&lt;b</nt-server-name>