[samba] Вопрос по LDAP + SAMBA + GOsa

[Andrey Shilnikov]

Вот мой самба-конфиг

[global]
        dos charset = cp866
        unix charset = koi8-r
        display charset = koi8-r
        workgroup = DOMAIN
        netbios name = DOMAIN-PDC
        server string = Documents
        interfaces = eth0, 192.168.0.57/255.255.255.0
        passdb backend = ldapsam:ldap://localhost/
        passwd program = /usr/sbin/smbldap-passwd
        passwd chat = *New*password %n\n *Retype*new*password* %n\n 
*all*autetication*tokens*updated*
        use kerberos keytab = Yes
        log level = 5
        log file = /var/log/samba/%m.log
        max log size = 500
        time server = Yes
        load printers = No
        add user script = /usr/sbin/smbldap-useradd -m %u
        delete user script = /usr/sbin/smbldap-userdel %u
        add group script = /usr/sbin/smbldap-groupadd -p %g
        delete group script = /usr/sbin/smbldap-groupdel %g
        add user to group script = /usr/sbin/smbldap-groupmod -m %g %u
        delete user from group script = /usr/sbin/smbldap-groupmod -x %g %u
        set primary group script = /usr/sbin/smbldap-usermod -g %g %u
        add machine script = /usr/sbin/smbldap-useradd -w -i %u
        logon path =
        logon home =
        domain logons = Yes
        os level = 255
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        admin users = admin
        ldap admin dn = cn=admin,dc=office,dc=etersoft,dc=ru
        ldap delete dn = Yes
        ldap group suffix = ou=groups
        ldap idmap suffix = ou=idmap
        ldap machine suffix = ou=computers
        ldap passwd sync = Yes
        ldap suffix = dc=office,dc=etersoft,dc=ru
        ldap ssl = no
        ldap user suffix = ou=people
        idmap uid = 15000-20000
        idmap gid = 15000-20000
        hosts allow = 192.168.0., 127.
        dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd

[home]
        comment = Home Directories
        valid users = %S
        read only = No
        path = /home/%U

[share]
        comment = data share
        path = /var/share
        valid users = %U
        read only = No
        create mask = 0765
        guest ok = Yes

[netlogon]
        comment = Network Logon Service
        path = /usr/local/etc/samba/netlogon/
        guest ok = Yes
        browseable = No
        share modes = No