[global] workgroup = MY realm = MY.DOMAIN.COM security = ADS auth methods = winbind password server = dc11.my.domain.com dc12.my.domain.com * name resolve order = host socket options = SO_REUSEADDR TCP_NODELAY os level = 0 preferred master = No socket address = 10.41.24.141 idmap domains = MY template homedir = /home/%u winbind cache time = 600 winbind use default domain = Yes winbind refresh tickets = Yes winbind offline logon = Yes idmap config MY:readonly = yes idmap config MY:default = yes idmap config MY:range = 300 - 300000000 idmap config MY:backend = ad include = /env/samba/lib/smb.include.shares