Thread: Review my smb.conf

so, adding share smb.conf today, , realized been few years since last reviewed it. working fine (and testparm has no complaints), wanted peer review on config.

code:

[global]      #server settings     bind interfaces = yes     interfaces = 127.0.0.0/8 eth1     #socket options set buffers 65355 optimization     socket options = tcp_nodelay iptos_lowdelay so_rcvbuf=65536 so_sndbuf=65536     create mask = 2774     directory mask = 2770     preserve case = yes ;    follow symlinks = yes     read raw = no     winbind enum groups=yes     winbind enum users=yes     name resolve order = wins lmhosts hosts bcast     panic action = /usr/share/samba/panic-action %d      #smb settings ;    netbios name = files     workgroup = mynet ;    #never enable client     wins support = yes ;       #never enable server      ;       #wins server = 192.168.xx.yy       server string = %h server (samba, ubuntu) ;    disable netbios = no ;    dns proxy = yes     os level = 32     domain master = yes ;    local master = yes     prefered master = yes     load printers = no     max connections = 20          #security     security = user     smb passwd file = /etc/smbpasswd ;    passdb backend = tdbsam     passwd program = /usr/bin/passwd %u     passwd chat = *enter\snew\s*\spassword:* %n\n *retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .     client ntlmv2 auth = yes     encrypt passwords = true ;    guest ok = no ;    usershare allow guests = yes     hosts allow = 192.168.xx.0/24 127.0.0.1     hosts deny = 0.0.0.0/0     invalid users = root     map guest = bad user     obey pam restrictions = yes     pam password change = yes     unix password sync = yes      #logging     syslog = 0     log file = /var/log/samba/log.%m     max log size = 2000  #============ share definitions =======================#  [pub]     comment = users's public ;    browsable = yes     read = no     locking = no     path = /home/user/public

notes:
wins should enabled
guest not allowed
create permissions should use setgid
user security (with smbpasswd -a).
encrypted authentication
encrypted passwd storage

so, see obsolete settings, or conflicts? advice on ; lines?
think?

all!

ok, lets try more specific questions then.

1) need tdbasm? combo of:

code:

security = user smb passwd file = /etc/smbpasswd passwd program = /usr/bin/passwd %u passwd chat = *enter\snew\s*\spassword:* %n\n *retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes unix password sync = yes encrypt passwords = true obey pam restrictions = yes

give me strong encryption on passwords @ rest , on network? without tdbasm? somthing commented out passwd backend setting idea why?

2) netbios name commented out, certianly didn;t it. idea why? obsolete?

3) want server win browser elections , masterbrowser. config needed?

code:

os level = 32     domain master = yes ;    local master = yes     prefered master = yes

i wonder commented out local master.

4) have uit configured wins server, , have clients point it. config seem rational?

code:

wins support = yes winbind enum groups=yes winbind enum users=yes

thanks all!

Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [all variants] Review my smb.conf

Ubuntu