Samba + ldap no debian Squeeze [RESOLVIDO]

include /etc/ldap/schema/core.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/misc.schema
#include /etc/ldap/schema/openldap.schema
include /etc/ldap/schema/samba.schema
#include /etc/ldap/schema/qmailuser.schema

pidfile /var/run/slapd/slapd.pid

argsfile /var/run/slapd/slapd.args

loglevel none

modulepath /usr/lib/ldap
moduleload back_hdb

sizelimit 500

tool-threads 1

backend hdb

database hdb
suffix "dc=educacional,dc=118"
#rootdn cn=admin,dc=educacional118
#rootpw {SSHA}8+CrZ6WkTJPjRxfQ2aeGGhfXN2BCGfCV
directory "/var/lib/ldap"
dbconfig set_cachesize 0 2097152 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
index objectClass eq
index memberUID,mail,givenname,uid,cn,uidNumber eq
index sambaSID,sambaPrimaryGroupSID,sambaDomainName eq
lastmod on
checkpoint 512 30
access to attrs=userPassword,shadowLastChange,sambaLMPAssword,sambaNTPassword
by dn="cn=admin,dc=educacional,dc=118" write
by anonymous auth
by self write
by * none
access to dn.base="" by * read
access to *
by dn="cn=admin,dc=educacional,dc=118" write
by * read

###Arquivo configurado!!!!

# Parametros Globais
[global]

# Dominio, Nome e Descricao
workgroup = educacional.118
netbios name = srvedu
server string = Servidor Educacional

# Nao mostrar no servidor o Wizard "Adicionar Impressora"
show add printer wizard = No

printing = cups
printcap name = cups
load printers = yes
time server = yes

# Quais interfaces de rede utilizar
# interfaces = 127.0.0.1, eth0, eth1
# bind interfaces only = Yes

# Nivel de Mensagens
log level = 1
log file = /var/log/samba/%m.log
max log size = 10
debug level = 0
syslog = 0

# Atuar como um Servidor de Dominio
security = user
domain logons = yes
preferred master = no
os level = 50
# Atuar como um PDC - caso seja BDC altere para "no"
domain master = yes

# Alteracao para autenticacao do Windows 7 no samba
lanman auth = yes
client NTLMv2 auth = yes

# Tratamento das senhas
encrypt passwords = true
passwd program = /usr/sbin/smbldap-passwd -u %u
passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n

# Equivalencia de usuarios Windows X Linux
username map = /etc/samba/smbusers

# Evitar o perfil ambulante do Windows NT/XP

#logon path = \\%N\profiles\padrao
#logon drive = U:
#logon home = \\%L\%U

logon path =
logon drive =
logon home =

# Script de logon em rede (deve ficar no compartilhamento netlogon - em formato DOS)
logon script = logon.bat

# Configuracoes para o LDAP
passdb backend = ldapsam:ldap://srvedu
ldap passwd sync = yes
ldap delete dn = Yes
ldap admin dn = cn=admin,dc=educacional,dc=118
ldap suffix = dc=educacional,dc=118
ldap machine suffix = ou=Computadores
ldap user suffix = ou=Usuarios
ldap group suffix = ou=Grupos
ldap idmap suffix = sambaDomainName=educacional.118
ldap ssl = off
idmap backend = ldap:ldap://127.0.0.1
idmap uid = 10000-20000
idmap gid = 10000-20000

# Permitir que usuarios do grupo "Administradores do Dominio" possam ingressar maquinas
# WinXP/Win2000 ao dominio samba
# to the domain
enable privileges = yes
admin users = @Administradores

# Scrips utilizados para Gerenciar Usuarios da M$
# adiconar/remover Usuarios
add user script = /usr/sbin/smbldap-useradd -m -a "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
# adiconar/remover Grupos
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
# Scripts para adiconar/remover Usuarios nos Grupos
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
# Script para definir o grupo primario do usuario
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
# Script par adicionar maquina Win NT/XP ingressar no Dominio
add machine script = /usr/sbin/smbldap-useradd -a -w "%u"

# Otimizacoes recomendadas em
smb ports = 445 139
name resolve order = lmhosts host wins bcast
utmp = Yes
time server = Yes
template shell = /bin/false
winbind use default domain = no

strict locking = Yes
map acl inherit = Yes


# Como o cliente ira' se comunicar com o servidor
socket options = SO_KEEPALIVE IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

# Servidor Wins da Rede
# Samba pode ser ou um Servidor WINS, ou Cliente WINS, mas nao ambos
wins support = no

# Ativar a internacionalizacao: permitir caracteres acentuados pelo Windows
#display charset = cp850
dos charset = CP850
unix charset = ISO8859-1

# Nao tentar fazer um lock nestes arquivos

# Veto de Arquivos por Grupo de %U - Grupo Primario
include = /etc/samba/smb.conf.%G
# veto files = /*.aif/*.mov/*.mpa/*.mpe/*.mp3/*.scr/*.vbe/*.wma/*.eml/*.nws/desktop.ini/*.exe
veto oplock files = /*.doc/*.xls/*.mdb/*.ppt/*.dwg

# Tratar os arquivos que comecam com "." como ocultos para maquinas Windows
hidedotfiles = yes


#=============================
#===== Compartilhamentos =====
#=============================

[netlogon]
comment = Servico de Logon em Rede [ logon.bat ]
path = /home/samba/netlogon
write list = sn9709, sn76020, @administradores
read list = @513
read only = Yes
guest ok = Yes
browseable = No
valid users = sn1012328

[Inventario]
comment = Servico Inventario de Hardware e Software
path = /home/inventario/samba
guest ok = Yes
browseable = No

[homes]
comment = Diretorio Pessoal de Cada Usuario [ U:\ ]
path = %H
browseable = no
writeable = Yes
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
fstype = ntfs
inherit permissions = Yes
inherit acls = Yes
force create mode = 0660
force directory mode = 4770

# quota vfs
nt acl support = yes

# recurso de LIXEIRA nos compartilhamentos e anti-virus

vfs objects = recycle libsvs_clamav default_quota:quotasettings
recycle: config-file = /etc/samba/recycle.conf
quotasettings: uid nolimit = no
quotasettings: gid = 513
quotasettings: gid nolimit = no
[edu]
comment = Educacional
browseable = No
path = /home/
write list = @"Administradores do Dominio"
guest ok = No
create mask = 0775
directory mask = 0775
inherit permissions = Yes
inherit acls = Yes
nt acl support = yes

[alunos]
comment = Educacional Alunos
browseable = No
path = /home/usr/alunos
write list = 7096, sn9709,sn76020,@"Administradores do Dominio"
guest ok = No
public = No
inherit permissions = Yes
inherit acls = Yes
nt acl support = yes

[treinamentos]
comment = Educacional Treinamentos
browseable = No
path = /home/usr/treinamentos
write list = @"Administradores do Dominio"
guest ok = No
public = No
inherit permissions = Yes
inherit acls = Yes
nc acl support = Yes


[Docentes]
comment = Educacional Professores Diarios/Planos de Aula
browseable = No
path = /home/usr/Docentes
read list = @Coordenadores
uest ok = No
public = No
valid users = @Professores


[Terceiros]
comment = Educacional Alunos
browseable = No
path = /home/usr/Terceiros
read list = @Coordenadores,@"Administradores do Dominio"
guest ok = No
public = No
inherit permissions = Yes
inherit acls = Yes
nc acl support = Yes

[temp]
comment = Dados Temporarios [ T:\ ]
path = /home/samba/temp
writeable = Yes
#inherit permissions = Yes
#inherit acls = Yes
#guest ok = Yes
share modes = No
directory mask = 4777
fstype = ntfs
browseable = No

[floppy]
comment = Unidade de Floppy Disk
path = /media/floopy
valid users = @administradores
read list = @administradores
browseable = No
root preexec = /bin/mount /media/floppy
root postexec = /bin/umount /media/floppy

[cdrom]
comment = Unidade de DVD
path = /cdrom
valid users = @Administradores
read list = @Administradores,ricardojacomini
read only = No
browseable = No
preexec close = Yes
root preexec = /bin/mount /cdrom
root postexec = /bin/umount /cdrom

[profiles]
comment = Servico de Profiles
path = /home/samba/profiles/
# writeable = Yes
read only = Yes
public = Yes
create mask = 4777
directory mask = 4777
guest ok = Yes
profile acls = Yes
browseable = No
csc policy = disable
locking = No
hide files = /desktop.ini/Desktop.ini

[printers]
comment = All Printers
path = /var/spool/samba
print ok = yes
guest ok = yes
browseable = no

[print$]
comment = Printer Drivers
path = /usr/share/cups/drivers
write list = @"Administradores do Dominio"
read only = yes
inherit permissions = yes
oplocks = yes
strict locking = no


[net]
comment = Alunos Liberados Internet
browseable = no
path = /etc/squid/files/internet/
write list = sn9709, sn76020, @"Administradores do Dominio",suporte
force create mode = 0660
force directory mode = 2770
nt acl support = yes
# quota vfs