More Debian updates.

(This used to be commit 1f7de8c42e05c70cdb76c4f917b7ff128f5249e6)

1 files changed, 91 insertions, 75 deletions

diff --git a/packaging/Debian/debian/smb.conf b/packaging/Debian/debian/smb.conf
index fac9bee8ca..6d8852958b 100644
--- a/packaging/Debian/debian/smb.conf
+++ b/packaging/Debian/debian/smb.conf
@@ -21,27 +21,31 @@
 
 [global]
 
-# Change this for the workgroup/NT-domain name your Samba server will part of
+## Browsing/Identification ###
+
+# Change this to the workgroup/NT-domain name your Samba server will part of
    workgroup = DEBIAN_FANS
 
 # server string is the equivalent of the NT Description field
    server string = %h server (Samba %v)
 
-# If you want to automatically load your printer list rather
-# than setting them up individually then you'll need this
-;   load printers = yes
+# Windows Internet Name Serving Support Section:
+# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
+;   wins support = no
 
-# lpr(ng) printing. You may wish to override the location of the
-# printcap file
-;   printing = bsd
-;   printcap name = /etc/printcap
+# WINS Server - Tells the NMBD components of Samba to be a WINS Client
+# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
+;   wins server = w.x.y.z
 
-# cups printing.  See also the cupsaddsmb(8) manpage
-;   printing = cups
-;   printcap name = cups
+# This will prevent nmbd to search for NetBIOS names through DNS.
+   dns proxy = no
+
+# What naming service and in what order should we use to resolve host names
+# to IP addresses
+;   name resolve order = lmhosts host wins bcast
 
-;   guest account = nobody
-   invalid users = root
+
+#### Debugging/Accounting ####
 
 # This tells Samba to use a separate log file for each machine
 # that connects
@@ -50,16 +54,21 @@
 # Put a capping on the size of the log files (in Kb).
    max log size = 1000
 
-# If you want Samba to log though syslog only then set the following
-# parameter to 'yes'. Please note that logging through syslog in
-# Samba is still experimental.
+# If you want Samba to only log through syslog then set the following
+# parameter to 'yes'.
 ;   syslog only = no
 
 # We want Samba to log a minimum amount of information to syslog. Everything
-# should go to /var/log/samba/log.{smb,nmb} instead. If you want to log
+# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
 # through syslog you should set the following parameter to something higher.
    syslog = 0
 
+# Do something sensible when Samba crashes: mail the admin a backtrace
+   panic action = /usr/share/samba/panic-action %d
+
+
+####### Authentication #######
+
 # "security = user" is always a good idea. This will require a Unix account
 # in this server for every user accessing the server. See
 # security_level.txt for details.
@@ -74,94 +83,88 @@
 # password database type you are using.  
    passdb backend = tdbsam guest
 
-# Using the following line enables you to customise your configuration
-# on a per machine basis. The %m gets replaced with the netbios name
-# of the machine that is connecting
-;   include = /home/samba/etc/smb.conf.%m
+   obey pam restrictions = yes
 
-# Most people will find that this option gives better performance.
-# See speed.txt and the manual pages for details
-# You may want to add the following on a Linux system:
-#         SO_RCVBUF=8192 SO_SNDBUF=8192
-   socket options = TCP_NODELAY
+;   guest account = nobody
+   invalid users = root
 
-# --- Browser Control Options ---
+# This boolean parameter controls whether Samba attempts to sync the Unix
+# password with the SMB password when the encrypted SMB password in the
+# passdb is changed.
+;   unix password sync = no
 
-# Please _read_ BROWSING.txt and set the next four parameters according
-# to your network setup. The defaults are specified below (commented
-# out.) It's important that you read BROWSING.txt so you don't break
-# browsing in your network!
+# For Unix password sync to work on a Debian GNU/Linux system, the following
+# parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for
+# sending the correct chat script for the passwd program in Debian Potato).
+   passwd program = /usr/bin/passwd %u
+   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
 
-# set local master to no if you don't want Samba to become a master
-# browser on your network. Otherwise the normal election rules apply
-;   local master = yes
+# This boolean controls whether PAM will be used for password changes
+# when requested by an SMB client instead of the program listed in
+# 'passwd program'. The default is 'no'.
+;   pam password change = no
 
-# OS Level determines the precedence of this server in master browser
-# elections. The default value should be reasonable
-;   os level = 20
 
-# Domain Master specifies Samba to be the Domain Master Browser. This
-# allows Samba to collate browse lists between subnets. Don't use this
-# if you already have a Windows NT domain controller doing this job
-;   domain master = auto
+########## Printing ##########
 
-# Preferred Master causes Samba to force a local browser election on startup
-# and gives it a slightly higher chance of winning the election
-;   preferred master = auto
+# If you want to automatically load your printer list rather
+# than setting them up individually then you'll need this
+;   load printers = yes
 
-# --- End of Browser Control Options ---
+# lpr(ng) printing. You may wish to override the location of the
+# printcap file
+;   printing = bsd
+;   printcap name = /etc/printcap
 
-# Windows Internet Name Serving Support Section:
-# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
-;   wins support = no
+# CUPS printing.  See also the cupsaddsmb(8) manpage in the
+# cupsys-client package.
+;   printing = cups
+;   printcap name = cups
 
-# WINS Server - Tells the NMBD components of Samba to be a WINS Client
-# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
-;   wins server = w.x.y.z
+# When using [print$], root is implicitly a 'printer admin', but you can
+# also give this right to other users to add drivers and set printer
+# properties
+;   printer admin = @ntadmin
 
-# This will prevent nmbd to search for NetBIOS names through DNS.
-   dns proxy = no
 
-# What naming service and in what order should we use to resolve host names
-# to IP addresses
-;   name resolve order = lmhosts host wins bcast
+######## File sharing ########
 
 # Name mangling options
 ;   preserve case = yes
 ;   short preserve case = yes
 
-# This boolean parameter controlls whether Samba attempts to sync. the Unix
-# password with the SMB password when the encrypted SMB password in the
-# /etc/samba/smbpasswd file is changed.
-;   unix password sync = false
 
-# For Unix password sync. to work on a Debian GNU/Linux system, the following
-# parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for
-# sending the correct chat script for the passwd program in Debian Potato).
-   passwd program = /usr/bin/passwd %u
-   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
+############ Misc ############
 
-# This boolean controls whether PAM will be used for password changes
-# when requested by an SMB client instead of the program listed in
-# 'passwd program'. The default is 'no'.
-;   pam password change = no
+# Using the following line enables you to customise your configuration
+# on a per machine basis. The %m gets replaced with the netbios name
+# of the machine that is connecting
+;   include = /home/samba/etc/smb.conf.%m
+
+# Most people will find that this option gives better performance.
+# See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html
+# for details
+# You may want to add the following on a Linux system:
+#         SO_RCVBUF=8192 SO_SNDBUF=8192
+   socket options = TCP_NODELAY
 
 # The following parameter is useful only if you have the linpopup package
 # installed. The samba maintainer and the linpopup maintainer are
 # working to ease installation and configuration of linpopup and samba.
 ;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
 
-   obey pam restrictions = yes
+
+# Domain Master specifies Samba to be the Domain Master Browser. If this
+# machine will be configured as a BDC (a secondary logon server), you
+# must set this to 'no'; otherwise, the default behavior is recommended.
+;   domain master = auto
 
 # Some defaults for winbind (make sure you're not using the ranges
 # for something else.)
-;   winbind uid = 10000-20000
-;   winbind gid = 10000-20000
+;   idmap uid = 10000-20000
+;   idmap gid = 10000-20000
 ;   template shell = /bin/bash
 
-# Do something sensible when Samba crashes: mail the admin a backtrace
-   panic action = /usr/share/samba/panic-action %d
-
 #======================= Share Definitions =======================
 
 [homes]
@@ -198,6 +201,19 @@
    writable = no
    create mode = 0700
 
+# Windows clients look for this share name as a source of downloadable
+# printer drivers
+[print$]
+   comment = Printer Drivers
+   path = /var/lib/samba/printers
+   browseable = yes
+   read only = yes
+   guest ok = no
+# Uncomment to allow remote administration of Windows print drivers.
+# Replace 'ntadmin' with the name of the group your admin users are
+# members of.
+;   write list = root, @ntadmin
+
 # A sample share for sharing your CD-ROM with others.
 ;[cdrom]
 ;   comment = Samba server's CD-ROM