#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
#  - When such options are commented with ";", the proposed setting
#    differs from the default Samba behaviour
#  - When commented with "#", the proposed setting is the default
#    behaviour of Samba but the option is considered important
#    enough to be mentioned here
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not made any basic syntactic 
# errors. 

#======================= Global Settings =======================

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
   security = ads
   workgroup = OU
   realm = OU.AD3.UCDAVIS.EDU

   netbios name = PHYS-ADTEST

   kerberos method = secrets and keytab

   client signing = yes
   client use spnego = yes

   template homedir = /home/%u

   password server = *

   server string = Samba Server

   log file = /var/log/samba/log.%m
   max log size = 5000
   log level = 999

   load printers = No
   cups options = raw
   # This stops an annoying message from appearing in logs 
   printcap name = /dev/null

   local master = no
   domain master = no
   preferred master = no

   wins support = no
   wins proxy = no
   dns proxy = yes
   name resolve order = wins bcast host lmhosts

#======================= Share Definitions =======================

# Un-comment the following (and tweak the other settings below to suit)
# to enable the default home directory shares. This will share each
# user's home directory as \\server\username
[homes]
   comment = Home Directories
   browseable = no
   read only = no

   valid users = %S

[storage]
   comment = PHYS-ADTEST Test space (ZFS)
   browseable = yes
   read only = no
   path = /storage

   writable = yes
   read only = no

   # https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
   map acl inherit = yes
   store dos attributes = yes

   acl group control = yes
   dos filemode = yes

   # https://aisalen.wordpress.com/2007/08/10/acls-on-samba/
   acl map full control = yes

   create mask    = 0600
   directory mask = 0700

   # http://www.techtutorials.net/articles/integrating_a_linux_server_into_active_directory_using_samba_a.html
   inherit acls = yes
   inherit permissions = yes

[storage2]
   comment = PHYS-ADTEST Test space (ext4)
   browseable = yes
   read only = no
   path = /storage2

   writable = yes
   read only = no

   # https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
   map acl inherit = yes
   store dos attributes = yes

   acl group control = yes
   dos filemode = yes

   # https://aisalen.wordpress.com/2007/08/10/acls-on-samba/
   acl map full control = yes

   create mask    = 0600
   directory mask = 0700

   # http://www.techtutorials.net/articles/integrating_a_linux_server_into_active_directory_using_samba_a.html
   inherit acls = yes
   inherit permissions = yes