[global]
        workgroup = IK
        realm = YY.XX.ZZ
        netbios name = XYZ
        netbios aliases = QWERT
        interfaces = lo, eth0
        server role = active directory domain controller
        domain master = yes
        local master = yes
        remote announce  = xxxxx/IK, yyyyy/IK, zzzzz/IK
        winbind trusted domains only = no
        winbind use default domain = yes
        winbind enum users  = yes
        winbind enum groups = yes
        winbind nss info = rfc2307
        idmap config *:backend = tdb
        idmap config *:range = 3000000-3999999
        idmap config IK:backend = ad
        idmap config IK:schema_mode = rfc2307
        idmap_ldb:use rfc2307 = yes
        idmap config IK:range = 10000-99999
        server services = -dns, -winbindd, +winbind
        vfs objects = acl_xattr
        inherit acls = yes
        map acl inherit = yes
        store dos attributes = yes
        wins support = yes
        wins proxy = yes
        rpc_server:spoolss = external
        rpc_daemon:spoolssd = fork
        spoolss: architecture = Windows x64
        ntlm auth = yes
        ldap server require strong auth = no
        cups server = localhost
        printjob username = %D\%U
        create mask = 0774
        force create mode = 0770
        directory mask = 0775
        force directory mode = 0770
        log level = 3