# Global parameters
[global]
netbios name = SERV2
realm = WRK.LOCAL
server role = active directory domain controller
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
workgroup = WRK
idmap_ldb:use rfc2307 = yes
#=======================Settings =====================================
load printers = no
log file = /var/log/samba/%m.log
log level = 1 vfs:1
full_audit:prefix = %u|%I|%S
full_audit:success = connect, open, mkdir, rmdir, unlink, write, rename
full_audit:failure = connect, open, mkdir, rmdir, unlink, write, rename
full_audit:facility = local5
full_audit:priority = notice
vfs objects = full_audit
max log size = 500
dns proxy = no
disable spoolss = yes
winbind uid = 1000-250000
winbind gid = 1000-250000
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind separator = \
template shell = /bin/bash
enable privileges = yes
obey pam restrictions = no
acl compatibility = Auto
#host msdfs = yes
[netlogon]
path = /var/lib/samba/sysvol/wrk.local/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No
[share]
vfs objects = acl_xattr
browsable = yes
#enable privileges = yes
#acl map full control = false
map read only = Permissions
store dos attributes = yes
valid users = @"domain users"
map hidden = no
write list = @"domain users"
writeable = yes
path = /mnt/hdd1/sharedir
map archive = no
map system = no
inherit acls = yes
inherit permissions = yes
inherit owner = yes
map acl inherit = yes
acl group control = true
dos filemode = yes
nt acl support = yes
