[global]
workgroup = DOMAIN # короткое имя домена
realm = DOMAIN.LOCAL
security = ADS
auth methods = winbind
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind separator = /
idmap config * : range = 10000-20000

# server role
# passdb backend
# obey pam restrictions
# unix password sync
# passwd program
# passwd chat
# pam password change
# map to guest
# usershare allow guest
# и т. д., можно закомментировать принтеры и проч.