[global]
    workgroup = ADMIN
    security = ads
    realm = ADMIN.SOMETHING.COM
    password server = admin.something.com
    domain master = no
    local master = no
    preferred master = no
    idmap backend = tdb
    idmap uid = 10000-99999
    idmap gid = 10000-99999
    idmap config TEST:backend = rid
    idmap config TEST:range = 10000-99999
    winbind separator = +
    winbind enum users = no
    winbind enum groups = no
    winbind use default domain = yes
    winbind nested groups = yes
    winbind refresh tickets = yes
    template homedir = /home/%D/%U
    template shell = /bin/bash
    client use spnego = yes
    client ntlmv2 auth = yes
    encrypt passwords = yes
    restrict anonymous = 2
    log file = /var/log/samba/log.%m
    max log size = 50
    winbind offline logon = true