DBDRIVER_OBJS = ldapdb.@O@
 DBDRIVER_SRCS = ldapdb.c
 DBDRIVER_INCLUDES = -I/usr/local/include
 DBDRIVER_LIBS = -L/usr/local/lib -lldap -llber -lresolv
 

 zone "sgb" in {
    type master;
    database "ldap ldap://127.0.0.1/zoneName=sgb,ou=DNS,dc=sgb 178600";
 };
 zone "2.168.192.in-addr.arpa" in {
    type master;
    database "ldap ldap://127.0.0.1/zoneName=2.168.192.in-addr.arpa,ou=DNS,dc=sgb 178600";
 };
 

 APPENDDEF(`confMAPDEF', `-DLDAPMAP')
 APPENDDEF(`confLIBS', `-lldap -llber')
 APPENDDEF(`confINCDIRS', `-I/usr/local/include')
 APPENDDEF(`confLIBDIRS', `-L/usr/local/lib')
 

 -информация об сервере LDAP (ldap.sgb - сервер LDAP, dc=sgb root дирректория)
 define(`confLDAP_DEFAULT_SPEC',`-h ldap.sgb -b dc=sgb')dnl
 -для aliases
 define(`ALIAS_FILE',`ldap:')dnl
 -для access
 FEATURE(`access_db',`LDAP')dnl
 

 bin:           root
 daemon:        root
 games:         root
 nobody:        root
 system:        root
 manager:       root
 root:          andrek
 

 localhost.localdomain  RELAY
 localhost              RELAY
 127.0.0.1              RELAY
 192.168.2              RELAY
 

 access to dn=".*,dc=sgb" attr=lmPassword
  by dn="cn=admin,dc=sgb" write
  by self write
  by * auth
 
 access to dn=".*,dc=sgb" attr=ntPassword
  by dn="cn=admin,dc=sgb" write
  by self write
  by * auth
 

 [global]
 ldap server = ldap.sgb
 ldap suffix = dc=sgb
 ldap admin dn = cn=admin,dc=sgb
 ldap filter = (&(uid=%u)(objectclass=sambaAccount))
 ldap port = 389
 ldap ssl = no
 

 dn: uid=sandy,ou=Users,dc=sgb
 objectClass: top
 objectClass: posixAccount
 objectClass: sambaAccount
 homeDirectory: /home/sandy
 uidNumber: 502
 gidNumber: 502
 uid: sandy
 pwdLastSet: 1036581625
 logonTime: 0
 logoffTime: 2147483647
 kickoffTime: 2147483647
 pwdCanChange: 0
 pwdMustChange: 2147483647
 displayName: SandySandy
 cn: SandySandy
 rid: 2004
 primaryGroupID: 2005
 lmPassword: B3174F63722E157EAAD3B435B51404EE
 ntPassword: 6AAB3EA1D7A717FF9A3BFC222B846A7B
 acctFlags: [UX]
 loginShell: /bin/false
 

 #
 # UID and GID starting at...
 #
 $UID_START = 2000;
 $GID_START = 2000;

 #
 # Slave LDAP : needed for read operations
 #
 $slaveLDAP = "ldap.sgb";

 # 
 # Master LDAP : needed for write operations
 #
 $masterLDAP = "ldap.sgb";

 #
 # LDAP Suffix
 #
 $suffix = "dc=sgb";

 # 
 # Where are stored Users
 #
 $usersou = q(Users);
 $usersdn = "ou=$usersou,$suffix";

 # 
 # Where are stored Computers
 #
 $computersou = q(Computers);
 $computersdn = "ou=$computersou,$suffix";

 # 
 # Where are stored Groups
 # 
 $groupsou = q(Group);
 $groupsdn = "ou=$groupsou,$suffix";

 #
 # Credential Configuration
 #
 # Bind DN used 
 $binddn = "admin";

 #
 # Bind DN passwd used
 $bindpasswd = "secret";

 # Login defs
 #
 # Default Login Shell
 #
 $_userLoginShell = q(/bin/bash);

 #
 # Home directory prefix (without username)
 #
 $_userHomePrefix = q(/home/);

 #
 # Default User (POSIX and Samba) GID
 #
 $_defaultUserGid = 2000;

 #
 # Default Computer (Samba) GID
 #
 $_defaultComputerGid = 553;

 #
 # The UNC path to home drives location without the username last extension
 # (will be dynamically prepended)
 $_userSmbHome = q(\\\\a\\homes);

 #
 # The UNC path to profiles locations without the username last extension
 # (will be dynamically prepended)
 $_userProfile = q(\\\\a_\\profiles\\);

 # 
 # The default Home Drive Letter mapping
 # (will be automatically mapped at logon time if home directory exist)
 $_userHomeDrive = q(H:);

 #
 # Allows not to use smbpasswd (if $with_smbpasswd == 0 in smbldap_conf.pm) but
 # prefer mkntpwd... most of the time, it's a wise choice :-) 
 $with_smbpasswd = 0;
 $smbpasswd = "/usr/bin/smbpasswd";
 $mk_ntpasswd = "/usr/local/sbin/mkntpwd";
 
 и т.д.
 

 dn: ou=Users,dc=sgb
 objectClass: top
 objectClass: organizationalUnit
 ou: Users

 dn: ou=Group,dc=sgb
 objectClass: top
 objectClass: organizationalUnit
 ou: Group

 dn: ou=Computers,dc=sgb
 objectClass: top
 objectClass: organizationalUnit
 ou: Computers
 

 passwd program = /usr/local/bin/smbldap-passwd.pl %u
 unix password sync = yes
 passwd chat = *new*password* %n\n *new*password* %n\n *updated*successfully*
 

 # Название recycle bin относительно ресурса
 name = .recycle/%U

 # максимальный размер файла (0 без проверки)
 maxsize = 0

 # KEEP_DIRECTORIES = сохранить иерархию директорий
 # VERSIONS         = создавать копии идентичных файлов
 # TOUCH            = touch access date of files moved into the recycle bin
 mode = KEEP_DIRECTORIES|VERSIONS|TOUCH

 # пропускать файлы:
 exclude = *.tmp|*.temp|*.o|*.obj|~$*

 # пропускать папки:
 excludedir = /tmp|/temp|/cache

 # Add file extensions of files where no versioning is wanted (i.e. copy # 1...)
 # only valid when mode=VERSIONS is set
 noversions = *.doc|*.xls|*.ppt
 

 ldap-server "ldap.sgb";
 ldap-port 386;
 ldap-username "cn=dhcp,dc=iarz";
 ldap-password "blabla";
 ldap-base-dn "dc=iarz";
 ldap-method dynamic;
 

 access to dn=".*,ou=dhcp,dc=iarz"
  by dn="cn=dhcp,dc=iarz" write
  by self write
  by * auth
 

 dn: cn=dhcp,dc=iarz
 objectClass: top
 objectClass: person
 sn: DHCP Administrator
 cn: dhcp

 dn: ou=dhcp,dc=iarz
 objectClass: top
 objectClass: organizationalUnit
 ou: dhcp
 

 option domain-name "iarz";
 option domain-name-servers ns.iarz;
 ddns-update-style interim;

 default-lease-time 32400;
 max-lease-time 64800;

 key DHCP_UPDATER {
        algorithm HMAC-MD5.SIG-ALG.REG.INT;
        secret SgBXABCDEFGHIJKLMNB75A==; }

 zone   iarz. {
        primary 127.0.0.1;
        key DHCP_UPDATER; }

 zone   0.0.192.IN-ADDR.ARPA. {
        primary 127.0.0.1;
        key DHCP_UPDATER; }

 subnet 192.168.1.0 netmask 255.255.255.0 {
        option routers 192.168.1.1;
        option subnet-mask 255.255.255.0;
        range dynamic-bootp 192.168.1.60 192.168.1.90; }

 subnet 192.168.2.0 netmask 255.255.255.0 {
        option routers 192.168.2.1;
        option subnet-mask 255.255.255.0;
        range dynamic-bootp 192.168.2.60 192.168.2.90; }