Editing Punjab samba architectural change (section)

==Samba Configuration:==

[global]
workgroup = PUNJABGOVT
netbios name= PUNJABGOVT1
security = user
passdb backend = ldapsam:ldap://ldap1.pbifmsiwdms.pjb/
hosts allow = 127.0.0.1 192.168.10.0/24 192.168.20.0/24 192.168.70.0/24 10.10.20.0/24 10.10.22.0/24 172.22.0.0/16
smb ports = 139
ldap admin dn = cn=Directory Manager
ldap suffix = dc=pbifmsiwdms,dc=pjb
ldap user suffix = ou=People
ldap machine suffix = ou=Computers
ldap group suffix = ou=Groups
lanman auth = yes
client lanman auth = yes
log file = /var/log/samba/%m.log
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
#obey pam restrictions = no
ldap passwd sync = yes
os level = 65
domain logons = yes
domain master = yes
local master = yes
preferred master = yes
ldap ssl= off
wins support = yes
wins proxy = yes
logon path = \\%L\profiles\%U
logon home = \\%L\%U

logon drive = H:
map to guest = bad user
logon script = logon.cmd
template shell = /bin/false
winbind use default domain = no
map to guest = bad user
map untrusted to domain = Yes
enable privileges = yes
lm announce = yes
pam password change = yes
passwd program = /usr/sbin/smbldap-passwd  %u

log level = 3
max log size = 1000
syslog only = no
syslog = 3

name resolve order = wins lmhosts hosts bcast
username map = /etc/samba/smbusers
add user script = /usr/sbin/smbldap-useradd -a %u
add machine script = /usr/sbin/smbldap-useradd -w %u
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g'
admin users = root
winbind enum groups = No
winbind trusted domains only = yes


[netlogon]
path = /mnt/gfs2/samba/netlogon
read only = yes
browsable = no
guest ok = yes


[profiles]
path = /mnt/gfs2/samba/profiles
read only = no
create mask = 0600
directory mask = 0700

#[profiles.V2]
#copy = profiles
#browseable = no

[homes]
browsable = no
writable = yes
path = /mnt/gfs2/share/%u

[csmb]
comment = Samba
public = yes
path = /mnt/gfs2/share
writeable = yes
ea support = yes

[nitrobit]
path = /mnt/gfs2/samba/nitrobit
read only = no
public = yes
browsable = yes
writable = yes
guest ok = yes







 Create appropriate directories/permissions for the Samba shares defined in your configuration : 	

 # mkdir -p /mnt/gfs2/samba 
 # mkdir /mnt/gfs2/samba/{netlogon,profiles} 
 # chown root:root -R /mnt/gfs2/samba 
 # chmod 0755 /mnt/gfs2/samba/netlogon 
 # chmod 1755 /mnt/gfs2/samba/profiles 
 # mkdir -p /mnt/gfs2/nitrobit




 Create a password for the ldap admin dn (the Directory Manager's Password) in Samba's secret file: 

 # smbpasswd -w <ldap-admin-password> 
 Setting stored passnword for "cn=Directory Manager" in secrets.tdb 

 net getlocalsid 
 SID for domain PUNJABGOVT is: S-1-5-21-4070117540-217532476-2757550252 



 If sid is not coming then you can Set manually by
 # Net setlocalsid  S-1-5-21-4070117540-217532476-2757550252

 Then Ckeck Groups of ldpa server is coming or not by 

 # net groupmap list
 PUNJABGOVT\Domain Users (S-1-5-21-4070117540-217532476-2757550252-513) -> Domain Users
 Domain Guests (S-1-5-21-4070117540-217532476-2757550252-514) -> Domain Guests
 Domain Computers (S-1-5-21-4070117540-217532476-2757550252-515) -> Domain Computers
 Administrators (S-1-5-32-544) -> Administrators
 Account Operators (S-1-5-32-548) -> Account Operators
 Print Operators (S-1-5-32-550) -> Print Operators
 Backup Operators (S-1-5-32-551) -> Backup Operators
 Replicators (S-1-5-32-552) -> Replicators
 Power Users (S-1-5-21-4070117540-217532476-2757550252-2912) -> Power Users
 PUNJABGOVT\Domain Admins (S-1-5-21-4070117540-217532476-2757550252-512) -> Domain Admins
 PUNJABGOVT\TCSDC (S-1-5-21-4070117540-217532476-2757550252-39001) -> TCSDC
 PUNJAB-USERS (S-1-5-21-4070117540-217532476-2757550252-39003) -> PUNJAB-USERS
 Datacenter Administrator (S-1-5-21-4070117540-217532476-2757550252-39005) -> data_admin