# /etc/samba/smb.conf: <<< Central configuration by Ansible >>>
# Samba4 Template für Standalone oder Domain-Member
[global]
        # Generelle Einstellungen
        security = ADS
        workgroup = DOMAIN
        server string = Samba %v (AD-Member)
        ;security = user
    	;server string = %h Server (Standalone)
        map to guest = Bad User
        access based share enum = yes

        # Logfile Einstellungen
        log file = /var/log/samba/log.%M
        log level = 0
        max log size = 500

        # Browsing and DNS
        domain master = no
        local master = no
        preferred master = no
        os level = 0
        hostname lookups = yes

        # Druckeinstellungen (deaktivieren)
        load printers = no
        disable spoolss = yes

        # Active Directory (bei Standalone kann dieser Teil entfernt werden)
        realm = DOMAIN.NET
        idmap config * : backend = tdb
        idmap config * : range = 3000-7999
        ;username map = /etc/samba/user.map

        winbind nss info = rfc2307
        winbind refresh tickets = yes
        winbind enum users = yes
        winbind enum groups = yes
        winbind cache time = 10
        winbind use default domain = yes

        vfs objects = acl_xattr
        map acl inherit = yes
        store dos attributes = yes

#======================= Share Definitions =======================
[log]
        comment = Logs
        path = /var/log
        read only = yes
        browseable = no
        guest ok = yes
        force user = root
        hosts allow = 127.0.0.1 192.168.0.0/27 win-pc1. win-pc2.

[Daten]
        path = /data/vdb1/Daten
        read only = no
        hosts allow = 127.0.0.1 192.168.0.0/27 win-pc1. win-pc2.