workgroup = MYCOMPANY
   realm = MYCOMPANY.LOCAL
   security = ads
   idmap config * : range = 16777216-33554431
   template homedir = /home/MYCOMPANY/%U
   template shell = /bin/bash
   kerberos method = secrets only
   winbind use default domain = true
   winbind offline logon = false