samba - Aug 2007 - smb.conf, in addition to my questions of yesterday

Hello, *

Here is my current smb.conf . I didn't want to send it immediately (in some 
groups that is not done) and I have omitted some dozens of shares at the end, 
which are similar to the ones present.
-------------- next part --------------
[global]
	workgroup = LIEMERS-MUSEUM    
	netbios name = HPserver
	server string = HP server (Samba %v)
#	printing = cups
#	printcap name = cups
#	printcap cache time = 750
#	cups options = raw
	username map = /etc/samba/smbusers
#	map to guest = Bad User
#	include = /etc/samba/dhcp.conf
	logon path = \\%L\profiles\.msprofile
	logon home = \\%L\%U\.9xprofile
	logon drive = P:
	security = user
	encrypt passwords = yes
	smb passwd file = /etc/samba/smbpasswd
	unix password sync = yes
	passwd program = /usr/bin/passwd %u
	passwd chat = *Enter\sUNIX\spassword:*%n\n*Retype\snew\sUNIX\spassword:%n\n.
	add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s
/bin/false %m$
	domain logons = yes
	domain master =  no
# 	remote announce = 10.0.0.3/LIEMERS-MUSEUM
	browsable = yes
#	ldap idmap suffix = ou=Idmap
#	ldap machine suffix = ou=Computers
	local master = yes
	preferred master = no 
	os level = 69
#	ldap suffix = dc=example,dc=com
	passdb backend = smbpasswd
	wins support = no
	wins server = 

[homes]
	comment = Home Directories
	valid users = %S
	browseable = no
	read only = no
	inherit acls = yes

[profiles]
	comment = Network Profiles Service
	path = %H
	read only = no
	store dos attributes = yes
	create mask = 0600
	directory mask = 0700

[users]
	comment = All users
	path = /home
	read only = no
	inherit acls = yes
	veto files = /aquota.user/groups/shares/

[groups]
	comment = All groups
	path = /home/groups
	read only = no
	inherit acls = yes

[pdf]
	comment = PDF creator
	path = /var/tmp
	printable = yes
#	print command = /usr/bin/smbprngenpdf -J '%J' -c %c -s %s -u
'%u' -z %z
	create mask = 0600

[printers]
	comment = All Printers
	path = /var/tmp
	printable = yes
	create mask = 0600
	browseable = no

#[print$]
#	comment = Printer Drivers
#	path = /var/lib/samba/drivers
#	write list = @ntadmin root
#	force group = ntadmin
#	create mask = 0664
#	directory mask = 0775

[fotos]
	comment = Foto-bestanden
	path = /museum/data-fotocollectie
	writeable = yes
	create mask = 0664
	directory mask = 0775

[backup]
	comment = Backupschijf
	path = /usr/backup
	writeable = yes
	create mask = 0664
	directory mask = 0775

[adlib]
	comment = Adlib bestanden
	path = /usr/museum/adlib
	writeable = yes
	create mask = 0664
	directory mask = 0775
[omitting the remaining shares for brevity]

>
> Here is my current smb.conf . I didn't want to send it immediately (in
> some
> groups that is not done)

I  understand. If you posted your whole kernel .config to a group for a
hardware question I would have been a little upset. But smb.conf files are
generally not that big.

and I have omitted some dozens of shares at the end,
> which are similar to the ones present.
>
Ok, This tells me a few things (Its way too early in the morning for me to
analyze this very deeply though)

You are not using AD, LDAP or winbindd but you are using the tdbsam with
mapped users security method. You are not using a wins server and the samba
server will not be the master browser (this may be a problem).

I see you have a lot of shares configured and the detail in the
smb.confsays that you have thought this one through.

Do the users in the /etc/samba/smbusers that you have used to connect to
from windows have their unix accounts created and is the password the same
as the mapped user has in windows?

Do you have a windows domain controller? Is it using active directory? I
assume it is the master browser for the network? Are the nmbd  and smbd
daemons running on the samba server?


John