[global]
	workgroup				= AD
	security				= ADS
	realm					= AD.INT.NISJA.NET
	winbind refresh tickets			= Yes
	vfs objects				= acl_xattr
	map acl inherit				= Yes
	store dos attributes			= Yes
	dedicated keytab file			= /etc/krb5.keytab
	kerberos method				= secrets and keytab
	winbind use default domain		= yes
;	username map				= user.map

# Disable printing
;	load printers				= no
;	printing				= bsd
;	printcap name				= /dev/null
;	disable spoolss				= yes

	log file				= /var/log/samba/%m.log
	log level				= 1

;       winbind nss info			= rfc2307
	idmap config  *:backend			= tdb
	idmap config  *:range			= 2000-9999
	idmap config AD:backend			= ad
	idmap config AD:range			= 10000-999999
	idmap config AD:schema_mode		= rfc2307
	idmap config AD:unix_nss_info		= yes
;       idmap config AD:unix_primary_group	= yes

# Template settings for login shell and home directory
	template shell				= /bin/bash
	template homedir			= /home/%U


# Test - Disable on production server
;	winbind enum users			= yes
;	winbind enum groups			= yes


	include					= /srv/samba/shares.conf
