smb.conf

[global]
   netbios name = bgo-nfs01
   workgroup = GREENREEFERS
   server string = %h server
   dns proxy = no
   log level = 2 msdfs:8 auth:5 winbind:5 idmap:5 acls:3
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   encrypt passwords = true
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   interfaces = eth1 lo
   bind interfaces only = yes

        realm = GREENREEFERS.NO
        preferred master = no
        dedicated keytab file = /etc/krb5.keytab
        kerberos method = secrets and keytab
        local master = no
        security = ADS
        winbind nss info = rfc2307
        winbind trusted domains only = no
        winbind enum users = yes
        winbind enum groups = yes
        winbind nested groups = yes
        winbind use default domain = yes
        winbind refresh tickets = Yes
        template homedir = /dev/null
        template shell = /bin/true
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        dns proxy = No
        ldap ssl = no
        panic action = /usr/share/samba/panic-action %d
#       invalid users = root
#       include = /etc/samba/dhcp.conf
        idmap config *:backend = tdb
        idmap config *:range = 2000-9999
        idmap config GREENREEFERS:backend = ad
        idmap config GREENREEFERS:schema_mode = rfc2307
        idmap config GREENREEFERS:range=10000-99999
        valid users = @"GREENREEFERS\grr"
        load printers = no
        printing = bsd
        printcap name = /dev/null
        disable spoolss = yes

        vfs objects = acl_xattr
        map acl inherit = Yes
        store dos attributes = Yes

[vmware-nfs]
        path = /data
        writeable = yes
        read only = no
        browsable = yes
        create mode = 775
        directory mode = 775
        comment = nfs data storage for vmware
        admin users = sk, @"GREENREEFERS.NO\grr-it",  @"GREENREEFERS.NO\domain admins"
        write list = sk, @"GREENREEFERS.NO\grr-it",  @"GREENREEFERS.NO\domain admins"

[old_mail]
        path = /data/samba/old_mail
        writeable = yes
        read only = no
        browsable = yes
        guest ok = no
        create mode = 775
        directory mode = 775
        comment = storage for mail files from old users
        admin users = sk, @"GREENREEFERS.NO\grr-it",  @"GREENREEFERS.NO\domain admins"
        write list = @"GREENREEFERS.NO\grr-it", @"GREENREEFERS.NO\Domain admins"

[old_files]
        path = /data/samba/old_files
        read only = no
        browsable = yes
        guest ok = no
        create mode = 775
        directory mode = 775
        comment = storage for old server files
        admin users = sk, @"GREENREEFERS.NO\grr-it", @"GREENREEFERS.NO\domain admins", @"GREENREEFERS.NO\grr"
#       valid users = @"GREENREEFERS.NO\grr"
        read list = @"GREENREEFERS.NO\grr"
        write list = @"GREENREEFERS.NO\grr-it", @"GREENREEFERS.NO\Domain admins"