[root@samba share2]# cat /etc/samba/smb.conf
[global]
    workgroup = HOME
    netbios name = IPA
    realm = HOME.DOMAIN.TLD
    kerberos method = dedicated keytab
    dedicated keytab file = /etc/samba/samba.keytab
    create krb5 conf = no
    security = user
    domain master = yes
    domain logons = yes
    log level = 1
    max log size = 100000
    log file = /var/log/samba/log.%m
    passdb backend = ipasam:ldap://ipa.home.domain.tld
    disable spoolss = yes
    ldapsam:trusted = yes
    ldap ssl = off
    ldap suffix = dc=home,dc=domain,dc=tld
    ldap user suffix = cn=users,cn=accounts
    ldap group suffix = cn=groups,cn=accounts
    ldap machine suffix = cn=computers,cn=accounts
    rpc_server:epmapper = external
    rpc_server:lsarpc = external
    rpc_server:lsass = external
    rpc_server:lsasd = external
    rpc_server:samr = external
    rpc_server:netlogon = external
    rpc_server:tcpip = yes
    rpc_daemon:epmd = fork
    rpc_daemon:lsasd = fork

    # Custom below
    server string = %h
    max protocol = SMB2
    unix extensions = no
    read only = no
    inherit acls = yes
    create mask = 660
    directory mask = 770
    force group = users
    vfs objects = catia fruit streams_xattr
    fruit:aapl
    fruit:nfs_aces = no

[share1]
    path = /srv/share1
    guest ok = no