#!/bin/bash
# $Id$
# This file must be executable to work! chmod 755!
key="$1"
# Note: create a cred file for each windows/Samba-Server in your network
#       which requires password authentification.  The file should contain
#       exactly two lines:
#          username=user
#          password=*****
#       Please don't use blank spaces to separate the equal sign from the
#       user account name or password.
credfile="/etc/auto.smb.$key"
# Note: Use cifs instead of smbfs:
mountopts="-fstype=cifs,file_mode=0644,dir_mode=0755,uid=user,gid=users"
smbclientopts=""
for P in /bin /sbin /usr/bin /usr/sbin
do
        if [ -x $P/smbclient ]
        then
                SMBCLIENT=$P/smbclient
                break
        fi
done
[ -x $SMBCLIENT ] || exit 1
if [ -e "$credfile" ]
then
        mountopts=$mountopts",credentials=$credfile"
        smbclientopts="-A "$credfile
else
        smbclientopts="-N"
fi
$SMBCLIENT $smbclientopts -gL $key 2>/dev/null \
   | awk -v key="$key" -v opts="$mountopts" -F'|' -- '
        BEGIN   { ORS=""; first=1 }
    /Disk/  { if (first) { print opts; first=0 };
          gsub(/ /, "\\ ", $2);
          sub(/\$/, "\\$", $2);
          print " \\\n\t /" $2, "://" key "/" $2 }
        END     { if (!first) print "\n"; else exit 1 }
        '

auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    pam_winbind.so cached_login use_first_pass
auth        required      pam_deny.so

account     required      pam_unix.so broken_shadow
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     [default=bad success=ok user_unknown=ignore] pam_winbind.so cached_login
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3
password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password    sufficient    pam_winbind.so cached_login use_authtok
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
session     required      pam_mkhomedir.so skel=/etc/skel/ umask=0026

root@smbsrv02 iivanov]# ls -a
.              .gconfd          .ICEauthority     Видео
..             .gnome2          .imsettings.log   Документы
.bash_history  .gnome2_private  .local            Загрузки
.cache         .gnote           .nautilus         Картинки
.config        .gnupg           .pulse            Музыка
.dbus          .gstreamer-0.10  .pulse-cookie     Общедоступные
.esd_auth      .gtk-bookmarks   .ssh              Рабочий стол
.gconf         .gvfs            .xsession-errors  Шаблоны

[root@smbsrv02 skel]# ls -a
.   111           .bash_profile  .conkyrc  .kde
..  .bash_logout  .bashrc        .gnome2   .mozilla

root@smbsrv02 iivanov]# ls -a
.              .gconfd          .ICEauthority     Видео
..             .gnome2          .imsettings.log   Документы
.bash_history  .gnome2_private  .local            Загрузки
.cache         .gnote           .nautilus         Картинки
.config        .gnupg           .pulse            Музыка
.dbus          .gstreamer-0.10  .pulse-cookie     Общедоступные
.esd_auth      .gtk-bookmarks   .ssh              Рабочий стол
.gconf         .gvfs            .xsession-errors  Шаблоны