[global]
        workgroup = Domain
        server string = Samba Server Version %v
        netbios name = FS-ALPHA2
client ldap sasl wrapping = sign
        # log files split per-machine:
        log file = /var/log/samba/log.%m
        # maximum size of 50KB per log file, then rotate:
        max log size = 50
        passdb backend = tdbsam
        security = ads
        realm = Domain
log level = 3
        domain master = no
        # the following login script name is determined by the machine name
        # (%m):
        # the following login script name is determined by the UNIX user used:
        # use an empty path to disable profile support:
        # various scripts can be used on a domain controller or a stand-alone
        # machine to add or delete corresponding UNIX accounts:
        local master = no
        os level = 1
        preferred master = no
        load printers = yes
        cups options = raw
        # obtain a list of printers automatically on UNIX System V systems:
map to guest = bad user
allow trusted domains = yes
ldap ssl = no
strict locking = No
time server = no
auth methods = winbind
nt acl support = yes
usershare allow guests = yes
acl group control = yes
map acl inherit = yes
idmap config Domain:backend = ad
idmap config Domain:range = 10000 – 50000
idmap config Domain:schema_mode = rfc2307
winbind enum groups = yes
winbind enum users = yes
winbind nested groups = yes
winbind cache time = 600
winbind use default domain = yes
template shell = /bin/bash
winbind refresh tickets = yes
winbind uid = 10000 - 50000
winbind gid = 10000 - 50000

winbind offline logon = yes

winbind cache time = 600

dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab

[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
        guest ok = no
        writable = no
        printable = yes
[tmp]
    comment = test
    path = /mnt
    browseable = yes
    guest ok = no
    valid users = @"Domain\etest"
    read only = no
    hide unreadable = yes
    write list = @"Domain\etest"
    inherit acls = yes
    acl map full control = True