[global]
	workgroup = DOMAIN
	security = ADS
	realm = DOMAIN.TLD

	winbind refresh tickets = Yes
	vfs objects = acl_xattr
	map acl inherit = Yes
	store dos attributes = Yes

        log file = /var/log/samba/log.%m
        max log size = 1000
        panic action = /usr/share/samba/panic-action %d
        map to guest = Bad User
        
        dedicated keytab file = /etc/krb5.keytab
	kerberos method = secrets and keytab

	idmap config * : backend = tdb
	idmap config * : range = 3000-7999

	idmap config DOMAIN:backend = rid
	idmap config DOMAIN:schema_mode = rfc2307
	idmap config DOMAIN:range = 10000-999999
	idmap config DOMAIN:unix_nss_info = yes
	idmap config DOMAIN:default = yes

	template shell = /bin/false
	template homedir = /dev/null

	server role = member server

 
[Mon partage]
        path = /opt/Mon partage
        read only = No