# /usr/local/samba/etc/smb.conf

[global]
	netbios name = DC
	realm = EIDA.LAN
	server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
	workgroup = EIDA
	server role = active directory domain controller
	idmap_ldb:use rfc2307 = yes
	username map = /usr/local/samba/etc/smbusers
	idmap config EIDA.LAN:unix_nss_info = yes
	idmap config EIDA.LAN : backend = tdb
	idmap config *:range = 70001-80000
	idmap config EIDA.LAN:schema_mode = rfc2307
	idmap config EIDA.LAN:range = 3000000-4000000
	os level = 100
	logon home = \\%N\users\%U
	logon path = \\%N\profile\%U
	acl allow execute always = yes

[netlogon]
	path = /usr/local/samba/var/locks/sysvol/studanka.local/scripts
	read only = No
	guest ok = yes
	browseable = no
	hide files = /Network Trash Folder/Temporary Items/.AppleDouble/
	valid users = %U

[sysvol]
	path = /usr/local/samba/var/locks/sysvol
	read only = No

[users]
	comment = Domovský adresář
	path = /server/users
	csc policy = documents
	read only = No
	force create mode = 0600
	force directory mode = 0700
	hide files = /Profile/Network Trash Folder/Temporary Items/.AppleDouble/mbox/Maildir/

[profile]
	comment = Profily uživatelů
	path = /server/profiles
	read only = no
	writable = yes
	valid users = %U
	browseable = no
	force create mode = 0600
	force directory mode = 0700
	store dos attributes = Yes
	profile acls = yes
	csc policy = disable
	vfs objects = acl_xattr
	follow symlinks = yes
	hide files = /Network Trash Folder/Temporary Items/.AppleDouble/mbox/Maildir/