[global]
	netbios name = %COMPNAME%
	workgroup = %ADNAME%

	security = ads

	case sensitive = no
	dns proxy = no
	unix charset = UTF-8
	dos charset = 866

	domain master = no
	local master = no
	preferred master = no
	os level = 0
	domain logons = no
	name resolve order = bcast wins host lmhosts

	idmap config * : backend = tdb
	idmap config * : rangesize = 149999
	idmap config * : range = 150000-300000
	idmap config * : backend = autorid
	idmap config %ADNAME%:backend = ads
	idmap config %ADNAME%:schema_mode = rfc2307
	idmap config %ADNAME%:range = 1000-9999

	realm = %ADNAME%.LOCAL
	kerberos method = secrets and keytab
	dedicated keytab file = /etc/krb5.keytab
	winbind use default domain = yes
	winbind nss info = rfc2307
	winbind refresh tickets = yes
	winbind enum users = yes
	winbind enum groups = yes
	winbind offline logon = yes
	winbind uid = 150000-300000
	winbind gid = 150000-300000

	obey pam restrictions = no
	vfs objects = acl_xattr
	map acl inherit = no
	map archive = no
	inherit permissions = no
	unix extensions = no
	store dos attributes = yes

	log file /var/log/samba/%m.log
	log level = 1

	smb ports = 445
	write raw = yes
	read raw = yes
	strict allocate = yes
	kernel oplocks = yes
	max xmit = 65535
	dead time = 15
	getwd cache = yes
	socket options = TCP_NODELAY SO_KEEPALIVE IPTOS_LOWDELAY

	load printers = no
	show add printer wizard = no
	printcap name = /dev/null
	disable spoolss = yes

	allow insecure wide links = yes

[my]
	path = /home/%username%
	browseable = yes
	writeable = yes
	read list = "%ADNAME%\%username%"
	write list = "%ADNAME%\%username%"
	inherit acls = yes
	delete readonly = yes
	oplocks = yes