smb.conf

#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example.
#
# NOTE: Toda vez que alterar este arquivo execute o comando "testparm"
# e veja as saídas, caso possua algum erro de sintaxe.

#======================= Global Settings =======================

[global]

## Configurações gerais, aplicadas a todas as pastas compartilhadas
## e regras de conexões.

# Change this to the workgroup/NT-domain name your Samba server will part of
   workgroup = servidor
   netbios name = pr29
   security = user

# a string do servidor é equivalente ao campo Descrição do NT
	server string = SERVIDOR

# Isso impedirá que o nmbd procure nomes NetBIOS por meio de DNS.
   dns proxy = no

## NETWORKING ##
#Restringe conexões IP's
   hosts deny = 0.0.0.0/0 #proibe tudo

   hosts allow = 10.40.22. #Permite este host
   allow hosts = 10.40.22. #Permite este host


######## Restrição de Arquivos
	veto files = /~$*/*.db/
	hide files = /~$*/*.db/*.log/*.tmp/
	###SUB OPÇÃO
	veto oplock files = /*.docx/*.xlsx/*.ods/*.doc/
	delete veto files = yes
        hide dot files = yes

  #permite exclusão de apenas leitura
  #delete readonly = yes
############  FIM ###############


########## Usuarios com privilegios de Adiministrador ############
	admin users = DIRETOR, AULA-1
####### FIM USUARIOS ADMIN #######################################

#### Debugging/Accounting ####

## Auditoria
	vfs objects = full_audit recycle
	log file = /home/servidor/backup/log/log.%U
	max log size = 0
	log level = 2
	timestamp logs = Yes
	full_audit:prefix =Usuario=%u|-%U|-IP=%I|-Nome do PC=%m|-ID atual=%d|-Nome da pasta=%S| HORA=%T
        full_audit:facility = LOCAL5
	full_audit:priority = NOTICE
        full_audit:success = rmdir, mkdir, read, write, rename, opendir, close, open, mv, pwrite, creat_file, sendfile, chmod
#       full_audit:failure = rmdir, mkdir, read, rename, connect, opendir, open
	full_audit:failure = none
#	full_audit:log_secdesc = True

# Registrar parâmetros através do SYSLOG, único e exclusivo pelo SYSLOG, usual = no
#esta em */documentos/log1
	syslog only = no
  # Nivél do syslog 0-3
	syslog = 3
	#syslog = 0
######## FIM SYSLOG ##########################

#MANDA UMA MSN QUANDO SAMBA TRAVA
	panic action = /home/servidor/backup/log/log_PANICO.%U %d

######### CONFIGURAÇÃO GLOBAL DA LIXEIRA ##############################
	recycle:keeptree = yes
        recycle:versions = yes
        recycle:touch = True
        recycle:touch_mtime = yes
        recycle:repository = /home/servidor/backup/lixeira/%U
        recycle:facility - LOCAL1
        recycle:priority = NOTICE
        recycle:maxsize = 0
        recycle:exclude = *.~*,~*.*,*.old,*.iso,*.tmp
######### FIM LIXEIRA ########################################

####### Autentificação #######

# Server role. Defines in which mode Samba will operate. Possible
# values are "standalone server", "member server", "classic primary
# domain controller", "classic backup domain controller", "active
# directory domain controller".
#
# Most people will want "standalone sever" or "member server".
# Running as "active directory domain controller" will require first
# running "samba-tool domain provision" to wipe databases and create a
# new domain.
   server role = standalone server

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.
   passdb backend = tdbsam


# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
   unix password sync = yes

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
# sending the correct chat script for the passwd program in Debian Sarge).


   passwd program = /usr/bin/passwd %u
   #passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   passwd chat =  *Digite\sa\s*\sNova\sSenha:* %n\n *Redigite\sa\sNova\sSenha:* %n\n *Senha\sAlterada\scom\sSucesso* .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
   pam password change = yes

   #Adicionado abaixo
   obey pam restrictions = yes


# Esta opção controla como as tentativas de autenticação malsucedidas são mapeadas
# para conexões anônimas
  #map to guest = Bad user
   map to guest = Never


############ Diversos ############

# Allow users who've been granted usershare privileges to create
# public shares, not just authenticated ones
	usershare allow guests = no

# Restringe a conexão aos IP's 10.40.22.XX,
	#host allow = 10.40.22.


  #Verifica a conexão em x segundos [30 minutos]
    keepalive = 1800



#======================= Definições dos Compartilhados =======================
###########################################################################
[Pecúlio]
	comment = Arquivos do Pecúlio
	path = /home/servidor/Compartilhados/Peculio
	browsable = yes
	public = no
	writable = yes
	#guest ok = no || yes-> anonimos e convidos
	guest ok = no
	########################################
	#ADICIONE NO FINAL OUTROS USUARIOS
	valid users = PECULIO, DIRETOR, CHEFE, FABIO, FRANCIS
	write list = PECULIO, DIRETOR, FABIO, FRANCIS
	read list = CHEFE, MAURICIO
	########################################
	read only = no
        inherit permissions = yes
        force user = servidor
        force group = administrativo
	create mask = 0660
	directory mask = 0770
################################################################################
[Penal]
	comment = Arquivos do Penal
	path = /home/servidor/Compartilhados/Penal
	browseable = yes
	public = no
	writable = yes
	guest ok = no
	############################################
	valid users = PENAL, DIRETOR, CHEFE, FRANCIS, MAURICIO, AULA-1, marcos
	write list = DIRETOR, PENAL, FRANCIS, CHEFE, MAURICIO, marcos
	read list = AULA-1
	############################################
	read only = no
	inherit permissions = yes
        force user = servidor
        force group = administrativo
	create mask = 0660
	directory mask = 0770
####################################################################################
[Saúde]
	comment = Arquivos da Enfermagem
	path = /home/servidor/Compartilhados/Saude
        public = no
	browsable = yes
        writable = yes
        guest ok = no
	#########################################################
	valid users = DIRETOR, SAUDE, SAUDE-1, CHEFE, FRANCIS, FABIO, PECULIO, marcos
	write list = SAUDE, DIRETOR, SAUDE-1, FRANCIS, FABIO, PECULIO
        read list = CHEFE, marcos
	#########################################################
	read only = no
        create mask = 0777
        directory mask = 0777
######################################################################################
[Chefe de Segurança]
        comment = Arquivos do chefe de segurança
        path = /home/servidor/Compartilhados/Chefe
	browseable = yes
        public = no
        writable = no
        guest ok = no
	#########################################
	valid users = DIRETOR, CHEFE, FRANCIS, marcos
	write list = DIRETOR, CHEFE, FRANCIS, marcos
	#########################################
	read only = no
        create mask = 0777
        directory mask = 0777
###########################################################
[Diretor]
        comment = Arquivos do Diretor
        path = /home/servidor/Compartilhados/Diretor
	browsable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
	valid users = DIRETOR, FRANCIS
	write list = DIRETOR, FRANCIS
	##########################################
	read only = no
        create mask = 0777
        directory mask = 0777
#############################################################
[Visitas]
        comment = Pasta relacionado as vistas na unidade
        path = /home/servidor/Área de Trabalho/Compartilhamento/Visitas
        public = no
        browsable = yes
        writable = yes
        guest ok = no
        ##########################################
        valid users = DIRETOR, CHEFE, SOCIAL, PLANTAO, FRANCIS, PENAL, PECULIO, AULA-1, marcos, PSICO, FABIO
	write list = SOCIAL, DIRETOR, PLANTAO, FRANCIS, PENAL, PECULIO, PSICO
	read list = CHEFE, AULA-1, marcos, FABIO
	##########################################
        read only = no
        create mask = 0777
        directory mask = 0777
########################################################################################
[Serviço Social]
        comment = Arquivos do Setor Social
        path = /home/servidor/Compartilhados/Social
        public = no
        browsable = yes
        writable = yes
        guest ok = no
	#########################################
        valid users = DIRETOR, SOCIAL, FRANCIS
	write list = SOCIAL, DIRETOR, FRANCIS
	##########################################
        read only = no
        create mask = 0777
        directory mask = 0777
#############################################################################
[Psicóloga]
        comment = Arquivos da Psicologia
        path = /home/servidor/Compartilhados/Psico
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
        valid users = DIRETOR, PSICO, FRANCIS
        write list = DIRETOR, PSICO, FRANCIS
        ##########################################
	read only = no
        create mask = 0777
        directory mask = 0777
############################################################
[Cartão CPESC]
        comment = Arquivos relacionados ao Cartão CPESC
        path = /home/servidor/Compartilhados/cpesc
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	valid users = DIRETOR, CHEFE, MAURICIO, FRANCIS, marcos
        write list = DIRETOR, CHEFE, MAURICIO, FRANCIS
	read list = marcos
        read only = no
        create mask = 0777
        directory mask = 0777
#######################################################
[Compartilhados - Adiministrativo]
        comment = Arquivos Compartilhados do adiministrativo
        path = /home/servidor/Compartilhados/Com_adm
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = DIRETOR, PENAL, PECULIO, CHEFE, MAURICIO, FRANCIS, FABIO, AULA-1, SOCIAL, PSICO, marcos
        write list = DIRETOR, PENAL, PECULIO, CHEFE, MAURICIO, FRANCIS, FABIO, AULA-1, marcos
        read list = SOCIAL, PSICO
	read only = no
        create mask = 0777
        directory mask = 0777
#############################################################################
[Impressões]
        comment = Arquivos de Impressões diversas
        path = /home/servidor/Compartilhados/Impressoes
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = AULA-1, DIRETOR, PENAL, SAUDE, PECULIO, PLANTAO, SOCIAL, PSICO, CHEFE, SAUDE-1, MAURICIO, FABIO, FRANCIS, marcos
        write list = AULA-1, DIRETOR, PENAL, SAUDE, PECULIO, PLANTAO, SOCIAL, PSICO, CHEFE, SAUDE-1, FABIO, FRANCIS, MAURICIO, marcos
        read only = no
        create mask = 0777
        directory mask = 0777
################################################################################
[Plantão]
        comment = Arquivos do plantão
        path = /home/servidor/Compartilhados/Plantao
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = PENAL, DIRETOR, PECULIO, PLANTAO, CHEFE, MAURICIO, FRANCIS, FABIO, marcos, aula-1
        write list = PENAL, DIRETOR, PECULIO, PLANTAO, CHEFE, MAURICIO, FRANCIS, FABIO, marcos
	read list = aula-1
        read only = no
        create mask = 0777
#	force create mask = 0777
        directory mask = 0777
################################################################################
[Escala de plantões]
        comment = Arquivos da Escala de Plantões
        path = /home/servidor/Compartilhados/Escala
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = DIRETOR, CHEFE, MAURICIO, FRANCIS, marcos
        write list = DIRETOR, CHEFE, FRANCIS, marcos
	read list = MAURICIO
        read only = no
        create mask = 0777
        directory mask = 0777
#######################################################################
[Enviar para o Fórum]
        comment = Arquivos a serem enviados para os fórum das comarcas (PECs)
        path = /home/servidor/Compartilhados/Forum
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = PENAL, DIRETOR, PECULIO, CHEFE, FRANCIS, MAURICIO, FABIO, marcos
        write list = PENAL, DIRETOR, PECULIO, FRANCIS, MAURICIO, FABIO, marcos
        read only = no
        read list = CHEFE
        create mask = 0777
        directory mask = 0777
#############################################################################
[Laboral]
        comment = Arquivos do Laboal
        path = /home/servidor/Compartilhados/Laboral
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = PECULIO, DIRETOR, CHEFE, FRANCIS, MAURICIO, FABIO, marcos
        write list = PECULIO, DIRETOR, CHEFE, FRANCIS, MAURICIO, FABIO, marcos
        read only = no
        create mask = 0777
        directory mask = 0777
################################################################################
[Arquivados]
        comment = Arquivos que não são mais usados, está pasta não é feito backup.
        path = /home/servidor/backup/arquivados
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = PECULIO, DIRETOR, PENAL, CHEFE, FABIO, FRANCIS, MAURICIO, AULA-1, marcos
        write list = PECULIO, DIRETOR, PENAL, CHEFE, FABIO, FRANCIS, MAURICIO, AULA-1, marcos
        read only = no
        create mask = 0777
        directory mask = 0777
############################################################################
[Administrativo]
        comment = Arquivos do adiministrativo
        path = /home/servidor/Compartilhados/Adm
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
        valid users = DIRETOR, PENAL, PECULIO, CHEFE, MAURICIO, FRANCIS, FABIO, marcos
        write list = DIRETOR, PENAL, PECULIO, CHEFE, MAURICIO, FRANCIS, FABIO, marcos
        ##########################################
	read only = no
        create mask = 0777
        directory mask = 0777
#############################################################################
[Educação]
        comment = Arquivos da Educação
        path = /home/servidor/Compartilhados/Educacao
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = PECULIO, DIRETOR, CHEFE, FRANCIS, AULA-1, MAURICIO, FABIO, PENAL, marcos
        write list = PECULIO, DIRETOR,FRANCIS, AUAL-1, MAURICIO, FABIO
        read only = no
        read list = CHEFE, PENAL, marcos
        create mask = 0777
        directory mask = 0777
#############################################################################
[Informática]
        comment = Arquivos Pertinentes a TI
        path = /home/servidor/Compartilhados/Informatica
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
	valid users = DIRETOR, AULA-1, CHEFE, FRANCIS, MAURICIO, PENAL, marcos, fabio, PECULIO
        write list = DIRETOR, AULA-1, FRANCIS, MAURICIO, CHEFE
	read list = marcos, fabio, PENAL, PECULIO
	##########################################
        read only = no
        create mask = 0777
        directory mask = 0777
#############################################################################
[Almoxarifado]
        comment = Arquivos do Almoxarifado
        path = /home/servidor/Compartilhados/Almox
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
        valid users = DIRETOR, AULA-1, CHEFE, MAURICIO, FRANCIS, marcos, PENAL, PECULIO
        write list = DIRETOR, AULA-1, MAURICIO, FRANCIS, CHEFE
	read list = marcos, PENAL, PECULIO
	##########################################
        read only = no
#        force create mask = 0777
	create mask = 0777
        directory mask = 0777
#############################################################################
[Compartilhados - Setor saúde]
        comment = Arquivos Compartilhados Pertinentes ao setor da saúde
        path = /home/servidor/Compartilhados/Com-saude
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
	valid users = SAUDE, DIRETOR, PENAL, CHEFE, SOCIAL, PSICO, SAUDE-1, FRANCIS, MAURICIO, FABIO, PECULIO, marcos
        write list = SAUDE, DIRETOR, PENAL, CHEFE, SOCIAL, PSICO, SAUDE-1, FRANCIS, MAURICIO, FABIO, PECULIO
	read list = CHEFE, marcos
	##########################################
        read only = no
        create mask = 0777
        directory mask = 0777
#############################################################################
[zOutros]
        comment = Outros tipos de Arquivos
        path = /home/servidor/Compartilhados/Outros
        browseable = yes
        public = no
        writable = yes
        guest ok = no
	##########################################
        valid users = PLANTAO, DIRETOR, SAUDE, SAUDE-1, PSICO, SOCIAL, FABIO, FRANCIS, CHEFE, MAURICIO, PENAL, PECULIO, AULA-1, marcos
        write list = PLANTÃO, DIRETOR, SAUDE, SAUDE-1, PSICO, SOCIAL, FABIO, FRANCIS, CHEFE MAURICIO, PENAL, PECILIO, AULA-1, marcos
        read only = no
	##########################################
        create mask = 0777
        directory mask = 0777
################################################################################
################################################################################
[Sala de Aula]
        comment = Arquivos compartilhados na Sala de aula (professores possuem acesso)
        path = /home/servidor/Compartilhados/Sala_aula
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = DIRETOR, AULA-1, PECULIO, SALA, FRANCIS, CHEFE, marcos
        write list = DIRETOR, AULA-1, PECULIO, SALA, FRANCIS
        read only = no
        read list = CHEFE, marcos
        create mask = 0777
        directory mask = 0777
#######################################################
############################################################
[Inteligência]
        comment = Diretorio para a sala de inteligencia do pr29
        path = /home/servidor/Compartilhados/Inteligencia
        browseable = yes
        public = no
        writable = yes
        guest ok = no
        valid users = DIRETOR, AULA-1, FRANCIS, CHEFE, marcos
        write list = DIRETOR, AULA-1, FRANCIS, marcos
        read only = no
        read list = CHEFE
        create mask = 0777
        directory mask = 0777
#######################################################






# Modelo para criação do novas pastas compartilhadas
# 1°-Cria pasta no ubuntu server ( mkdir 777 [/home/servidor/compartilhados/nome_pasta] )
#
############################################################
#[nome_pasta]
#        comment = Comentario da pasta/para que serve
#        path = /home/servidor/Compartilhados/nome_pasta
#        browseable = yes
#        public = no
#        writable = yes
#        guest ok = no
#        valid users = Lista de usuários com permissão de acesso da pasta
#        write list = Lista de usuários com permissão de escrita a pasta
#        read list = Lista de usuários com permissão de leitura a pasta
#        read only = no
#        read list = CHEFE
#        create mask = 0777
#        directory mask = 0777
#######################################################