[global]

    netbios name = test-dc
    workgroup = test-dc
    wins support = yes
    domain master = yes
    local master = yes
    preferred master = yes
    os level = 255
    log level = 2 winbind:5
    security = user
    encrypt passwords = yes
    domain logons = yes

        create mode = 770
    directory mode = 770

    passdb backend = ldapsam
    ldapsam:trusted=yes
    ldapsam:editposix=yes

    ldap admin dn = cn=admin,dc=test-dc,dc=de
    ldap delete dn = yes
    ldap group suffix = ou=groups
    ldap machine suffix = ou=computers
    ldap user suffix = ou=users
    ldap suffix = dc=test-dc,dc=de
    ldap ssl = no

#idmap config DEFAULT:backend = ldap
#idmap config DEFAULT:readonly = no
#idmap config DEFAULT:default = yes
#idmap config DEFAULT:ldap_base_dn = ou=idmap,dc=test-dc,dc=de
#idmap config DEFAULT:ldap_user_dn = cn=admin,dc=test-dc,dc=de
#idmap config DEFAULT:ldap_url = ldap://localhost
#idmap config DEFAULT:range = 50000-500000
#idmap alloc backend = ldap
#idmap alloc config:ldap_base_dn = ou=idmap,dc=test-dc,dc=de
#idmap alloc config:ldap_user_dn = cn=admin,dc=test-dc,dc=de
#idmap alloc config:ldap_url = ldap://localhost
#idmap alloc config:range = 50000-500000

    ldap idmap suffix = ou=idmap
    idmap backend = ldap:"ldap://localhost"
    idmap uid = 50000-500000
    idmap gid = 50000-500000


[netlogon]
    path = /data/netlogon
    writable = no
    browsable = no

[profiles]
    path = /data/profiles
    writable = yes
    create mask = 0600
    directory mask = 0700
    browsable = no

[groups]
    path = /data/users
    root preexec = /usr/local/bin/mklinks %U
    writeable = yes
[homes]
    path = /data/homes
    comment = homes
    writeable = yes
    valid users = %S

[pub]
    comment = pub
    inherit acls = Yes
    path = /data/share/pub
    read only = No
    valid users = @workers, @admins

[finance]
        comment = finance
        inherit acls = Yes
        path = /data/share/finance
        read only = No
        valid users = @admins

[customer]
        comment = customer
        inherit acls = Yes
        path = /data/share/customer
        read only = No
        valid users = @workers