[global]
   dos charset = 866
   unix charset = UTF8
   server string = Отдел АСУП - Синотов В.С.

   workgroup = CRB
   realm = CRB.LOCAL
   dns proxy = no

   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d

   security = ADS
   encrypt passwords = true
   socket options = TCP_NODELAY
   domain master = no
   local master = no
   preferred master = no
   os level = 0
   domain logons = no

#   server role = standalone server
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
#   usershare allow guests = yes

   idmap config * : range = 10000-40000
   idmap config * : backend = tbd
   winbind enum groups = yes
   winbind enum users = yes
   winbind use default domain = yes
   template shell = /bin/bash
   winbind refresh tickets = yes
   winbind offline logon = yes
   winbind cache time = 300

   load printers = no
   show add printer wizard = no
   printcap name = /dev/null
   disable spoolss = yes