[global]

server string = DC (srv-zh-01)
workgroup = ZH
netbios name = srv-zh-01

admin users = root

encrypt passwords = yes
security = user
restrict anonymous = 2
local master = yes
domain master = yes
preferred master = yes
domain logons = yes
logon path =
os level = 255
time server = yes

idmap uid = 10000-20000
idmap gid = 10000-20000

hosts allow = 192.168. 127.

log file = /usr/local/samba/var/log.%m
max log size = 100

passdb backend = tdbsam

# These scripts are used on a domain controller or stand-alone
# machine to add or delete corresponding unix accounts

  add user script = /usr/local/samba/scripts/adduser.sh "%u"  
  add group script = /usr/local/samba/scripts/addgroup.sh "%g"
  add machine script = /usr/local/samba/scripts/addmachine.sh "%u"
  add user to group script = /usr/local/samba/scripts/addusertogroup.sh "u" "%g"
  delete user script = /usr/local/samba/scripts/deluser.sh "%u"
  delete group script = /usr/local/samba/scripts/delgroup.sh "%g"
  delete user from group script = /usr/local/samba/scripts/deluserfrgroup.sh "%u" "%g"
  set primary group script = /usr/local/samba/scripts/setprimarygroup.sh "%u" "%g"

#============================ Share Definitions ==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   guest ok = no

[netlogon]
   comment = Network Logon Service
   path = /usr/local/samba/shares/netlogon
   writable = no
   browseable = yes

[pub]
    comment = Pub
    path = /usr/local/samba/shares/pub
    writable = yes
    browsable = yes