/etc/samba/smb.conf - Githubissues

# Global parameters
[global]
    workgroup = CCENTER
    realm = ADS.CCENTER.LAN
    netbios name = DC1
    interfaces = lo, 192.168.17.0/24

    dedicated keytab file = /etc/krb5.keytab
    kerberos method = secrets and keytab

    security = ADS
    idmap_ldb:use rfc2307 = yes

    dns forwarder = 192.168.17.1

    load printers = no
    printing = bsd
    printcap name = /dev/null

    winbind use default domain = yes
    winbind nss info = rfc2307
    winbind enum users = yes
    winbind enum groups = yes
    winbind refresh tickets = yes
    winbind offline logon = yes

    idmap config * : backend = tdb
    idmap config * : schema_mode = rfc2307
    idmap config * : range = 100000-100999

    idmap config CCENTER : backend = ad
    idmap config CCENTER : schema_mode = rfc2307
    idmap config CCENTER : range = 500-99999

#   log level = 3 smb:0 auth:0 winbind:10 passdb:0 tdb:0 sam:0 idmap:10
#   debug uid = yes

# ADS only
    server role = active directory domain controller
    template homedir = /home/%U
    template shell = /bin/bash

# Member server only
    vfs objects = acl_xattr
    map acl inherit = Yes
    store dos attributes = Yes

[netlogon]
    path = /var/lib/samba/sysvol/ads.ccenter.lan/scripts
    read only = No

[sysvol]
    path = /var/lib/samba/sysvol
    read only = No
AnrDaemon / samba4-ads

/etc/samba/smb.conf #4
