[global]
  workgroup = %%DOMAIN%%
  netbios name = %%HOSTNAME%%
  winbind separator = #
  idmap uid = 10000-20000
  idmap gid = 10000-20000
  winbind enum users = yes
  winbind enum groups = yes
  winbind use default domain = yes
  security = ads
  encrypt passwords = true
  realm = %%REALM%%
  password server = %%PWSERVER%%
  template shell = /bin/bash
  client use spnego = yes
  dos charset = 850

[homes]
  guest ok = no
  read only = no
  create mode = 0664
  directory mode = 0775


