smb.conf

[global]
   netbios name = bgo-nfs01
   workgroup = GREENREEFERS
   security = ADS
   realm = GREENREEFERS.NO
   dedicated keytab file = /etc/krb5.keytab
   kerberos method = secrets and keytab
   server string = %h server
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes
   winbind trusted domains only = no
   winbind nested groups = yes
   winbind refresh tickets = Yes
   winbind nss info = rfc2307
   idmap config *:backend = tdb
   idmap config *:range = 2000-9999
   idmap config GREENREEFERS:backend = rid
   idmap config GREENREEFERS:range=10000-99999
   load printers = no
   printing = bsd
   disable spoolss = yes
   preferred master = no
   local master = no
   template homedir = /dev/null
   template shell = /bin/true
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   dns proxy = no
   interfaces = eth1 lo
   bind interfaces only = yes
   log level = 2 msdfs:8 auth:5 winbind:5 idmap:5 acls:3
   panic action = /usr/share/samba/panic-action %d
   valid users = @"GREENREEFERS\grr"
   vfs objects = acl_xattr
   map acl inherit = Yes
   store dos attributes = Yes

[vmware-nfs]
        path = /srv/nfs
        writeable = yes
        read only = no
        browsable = yes
        create mode = 775
        directory mode = 775
        comment = nfs data storage for vmware
        admin users = sk, @"GREENREEFERS.NO\grr-it",  @"GREENREEFERS.NO\domain admins"
        write list = sk, @"GREENREEFERS.NO\grr-it",  @"GREENREEFERS.NO\domain admins"

[old_mail]
        path = /srv/samba/old_mail
        writeable = yes
        read only = no
        browsable = yes
        guest ok = no
        create mode = 775
        directory mode = 775
        comment = storage for mail files from old users
        admin users = sk, @"GREENREEFERS.NO\grr-it",  @"GREENREEFERS.NO\domain admins"
        write list = @"GREENREEFERS.NO\grr-it", @"GREENREEFERS.NO\Domain admins"

[old_files]
        path = /srv/samba/old_files
        read only = no
        browsable = yes
        guest ok = no
        create mode = 775
        directory mode = 775
        comment = storage for old server files
        admin users = sk, @"GREENREEFERS.NO\grr-it", @"GREENREEFERS.NO\domain admins", @"GREENREEFERS.NO\grr"
#       valid users = @"GREENREEFERS.NO\grr"
        read list = @"GREENREEFERS.NO\grr"
        write list = @"GREENREEFERS.NO\grr-it", @"GREENREEFERS.NO\Domain admins"