[global]

   workgroup = AD
   realm = AD.LOCALDOMAIN.COM
   kerberos method = secrets and keytab

# server string is the equivalent of the NT Description field
   server string = Samba Server

# allow connections from these subnets
   hosts allow = 127.0.0.1 172.30.0.0/16 172.18.10.0/24 10.80.8.0/24 10.20.17.11 10.20.17.21 10.20.17.23 10.20.17.24 10.21.30.0/24 10.80.12.101 10.23.30.0/24 10.23.63.0/24 10.27.30.0/24 10.124.220.0/24 10.23.32.0/24

# printer configuration
   printcap name = /dev/null
   load printers = no

   guest account = nobody
   browseable = yes

# open file/directory permissions, etc
   force create mode = 0777
   force directory mode = 0777
   guest ok = no
   hide dot files = no

# disable loggging via syslog
   syslog = 0

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/samba.%m
# this tells samba to use one log file for everything
#  log file = /var/log/samba/log.smbd
# set the log level, 3 is good for debugging
  log level = 10

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Security mode, ADS as this host is joined to the domain via realmd/sssd
    security = ADS
    map to guest = Bad User

# No passwords should be sent in plaintext, would break older versions of windows.
encrypt passwords = yes

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
   local master = no

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 33
   os level = 0

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
;   domain master = yes
   domain master = no

# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
;   preferred master = yes
   preferred master = no

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
;   wins support = yes
   wins support = no

#============================ Share Definitions ==============================

[root]
   comment = nfs
   path = /
   read only = no
   public = yes
   writable = yes
   browseable = yes
   guest ok = yes


[user_data]
   comment = user_data
   path = /user_data
   public = no
   writable = yes
   guest ok = no
   browseable = yes
   valid users = @"alias_tech@ad.LOCALDOMAIN.com"