[global]
workgroup = {{ smb_workgroup }}
realm = {{ smb_realm }}
netbios name = {{ ansible_hostname }}
security = ADS
#encrypt passwords = yes
dns forwarder = {{ smb_dns_servers }}

idmap config * :backend = tdb
idmap config *:range = 50000-1000000
template homedir = /home/%D/%U
template shell = /bin/bash

winbind use default domain = yes
winbind offline logon = false
winbind nss info = rfc2307
winbind enum users  = yes
winbind enum groups = yes
winbind offline logon = yes

vfs objects = acl_xattr
map acl inherit = Yes
store dos attributes = Yes