cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz /etc/ldap/schema/ 

 gzip -d /etc/ldap/schema/samba.schema.gz

 [global]
    # Domain name ..
    workgroup = GACOSTA-NET
    # Server name - as seen by Windows PCs ..
    netbios name = GACOSTA-PDC
    security = user
    # Be a PDC ..
    domain logons = Yes
    domain master = Yes
    # Be a WINS server ..
    wins support = true
    smb ports = 139

    obey pam restrictions = No
    dns proxy = No
    os level = 35
    log file = /var/log/samba/log.%m
    max log size = 1000
    syslog = 3
    panic action = /usr/share/samba/panic-action %d
    pam password change = Yes

    # Allows users on WinXP PCs to change their password when they press Ctrl-Alt-Del
    unix password sync = no
    ldap passwd sync = yes

    passwd program = /usr/sbin/smbldap-passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n *all*authentication*tokens*updated*

    # Printing from PCs will go via CUPS ..
    load printers = yes
    printing = cups
    printcap name = cups

    # Use LDAP for Samba user accounts and groups ..
    passdb backend = ldapsam:ldap://localhost

    # This must match init.ldif ..
    ldap suffix = dc=gacosta-net
    # The password for cn=admin MUST be stored in /etc/samba/secrets.tdb
    # This is done by running 'sudo smbpasswd -w'.
    ldap admin dn = cn=admin,dc=gacosta-net

    # 4 OUs that Samba uses when creating user accounts, computer accounts, etc.
    # (Because we are using smbldap-tools, call them 'Users', 'Computers', etc.)
    ldap machine suffix = ou=Computers
    ldap user suffix = ou=Users
    ldap group suffix = ou=Groups
    ldap idmap suffix = ou=Idmap
    # Samba and LDAP server are on the same server in this example.
    ldap ssl = no

    # Scripts for Samba to use if it creates users, groups, etc.
    add user script = /usr/sbin/smbldap-useradd -m '%u'
    delete user script = /usr/sbin/smbldap-userdel %u
    add group script = /usr/sbin/smbldap-groupadd -p '%g'
    delete group script = /usr/sbin/smbldap-groupdel '%g'
    add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g'
    delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g'
    set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'

    ldap delete dn = Yes

    # Script that Samba users when a PC joins the domain ..
    # (when changing 'Computer Properties' on the PC)
    add machine script = /usr/sbin/smbldap-useradd -w '%u'

    # Values used when a new user is created ..
    # (Note: '%L' does not work properly with smbldap-tools 0.9.4-1)
    logon drive = H:
    logon home = \\gacosta-pdc\%U
    logon path = \\gacosta-pdc\Profiles\%U
    logon script = logon.bat

    # This is required for Windows XP client ..
    server signing = auto
    server schannel = Auto

[homes]
        comment = Home Directories
        valid users = %S
        read only = No
        browseable = No
        create mask = 0600
        directory mask = 0700

[netlogon]
        comment = Network Logon Service
        path = /var/lib/samba/netlogon
        admin users = root
        guest ok = Yes
        browseable = No

[Profiles]
        comment = Roaming Profile Share
        # would probably change this to elsewhere in a production system ..
        path = /var/lib/samba/profiles
        read only = No
        profile acls = Yes
        browsable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        use client driver = Yes
        create mask = 0600
        guest ok = Yes
        printable = Yes
        browseable = No
        public = yes
        writable = yes
        admin users = root
        write list = root

[print$]
        comment = Printer Drivers Share
        path = /var/lib/samba/printers
        write list = root
        create mask = 0664
        directory mask = 0775
        admin users = root

  cd /usr/share/doc/smbldap-tools/examples/ 

  cp smbldap_bind.conf /etc/smbldap-tools/
  cp smbldap.conf.gz /etc/smbldap-tools/

  gzip -d /etc/smbldap-tools/smbldap.conf.gz  

  ## This line must have the same SID as when you ran "net getlocalsid"  
  SID="S-1-5-21-949328747-3404738746-3052206637"  
  sambaDomain="GACOSTA-NET"
  ldapTLS="0"
  suffix="dc=gacosta-net"
  usersdn="ou=Users,${suffix}"
  computersdn="ou=Computers,${suffix}"
  groupsdn="ou=Groups,${suffix}"
  idmapdn="ou=Idmap,${suffix}"
  sambaUnixIdPooldn="sambaDomainName=Gacosta-net,${suffix}"

  ##SAMBA Configuration##
  userSmbHome="\\Gacosta-PDC\%U"
  userProfile="\\Gacosta-PDC\profiles\%U"
  userHomeDrive="H:"
  userScript="logon.bat"
  mailDomain="gacosta.net"

  cp /etc/ldap.conf /etc/ldap/ldap.conf  

  cp /etc/nsswitch.conf /etc/nsswitch.conf.original 

  cd /etc/pam.d/
  mkdir bkup
  cp * bkup/