[global]
	workgroup = AD
	realm = AD.TAO.AT
	security = ADS

	idmap config * : backend = tdb
	idmap config * : range = 60000-61000
	idmap config AD : backend = ad
	idmap config AD : range = 4500-50000

	winbind nss info = rfc2307
	winbind enum users = yes
	winbind enum groups = yes
	winbind use default domain = yes
	winbind offline logon = yes
	winbind max domain connections = 32

	template homedir = /home/%U
	template shell = /bin/bash

	winbind reconnect delay = 5
	winbind cache time = 30
	interfaces = eth* wlan* enp* wlp* tun* tap*

	load printers = no
	unix extensions = no
	kerberos method = system keytab