@!@
print '; ---------------------<smb service configuration>-----------------------'
if configRegistry.get('samba4/service/smb', 's3fs') == 's3fs':
	print '''
	debug hirestimestamp = yes
	debug pid = yes'''

	dcerpc_endpoints = []
	if configRegistry.is_false('samba4/dcerpc/endpoint/drsuapi'):
		dcerpc_endpoints.append('-drsuapi')
	if dcerpc_endpoints:
		print '\tdcerpc endpoint servers\t=', ' '.join(dcerpc_endpoints)

elif configRegistry.get('samba4/service/smb', 'smbd') == 'smbd':
	if configRegistry['samba4/role'] != 'MEMBER':	## otherwise it's already set in 10global
		print '\tsecurity = ads'

	print '''
	debug hirestimestamp = yes
	debug pid = yes

	dcerpc_endpoints = ["-unixinfo", "-rpcecho", "-spoolss", "-winreg", "-wkssvc", "-srvsvc"]
	if configRegistry.is_false('samba4/dcerpc/endpoint/drsuapi'):
		dcerpc_endpoints.append('-drsuapi')
	print '\tdcerpc endpoint servers\t=', ' '.join(dcerpc_endpoints)

	domain logons = yes
	passdb backend = samba4
	auth methods = guest samba4
	server signing = on

	np:proxy = epmapper browser protected_storage lsass lsarpc netlogon samr

	rpc_server:winreg = embedded
	rpc_server:srvsvc = embedded
	rpc_server:netdfs = embedded
	rpc_server:wkssvc = embedded
	rpc_server:spoolss = embedded

	rpc_server:epmapper = disabled
	rpc_server:lsarpc = disabled
	rpc_server:netlogon = disabled
	rpc_server:samr = disabled
	rpc_server:rpcecho = disabled
	rpc_server:dssetup = disabled
	rpc_server:svctl = disabled
	rpc_server:ntsvcs = disabled
	rpc_server:eventlog = disabled
	rpc_server:initshutdown = disabled

	rpc_daemon:epmd = disabled
	rpc_daemon:lsasd = disabled

	rpc_server:tcpip = no'''

elif configRegistry.get('samba4/service/smb', 'smbd') == 's4':
	if configRegistry.get('samba4/ntacl/backend', 'native') == 'tdb':
		print '\tposix:eadb = /var/lib/samba/private/samba4_eadb.tdb'

print '; ---------------------</smb service configuration>----------------------'
@!@
