[logging]
        default = FILE:/var/log/krb.log
        kdc = FILE:/var/log/kdc.log
        admin_server = FILE:/var/log/kadmin.log

[libdefaults]
        default_realm = NOMBLOT.ORG
        default_tgs_enctypes = aes256-cts aes128-cts arcfour-hmac-md5 des-cbc-md5 des-cbc-crc
        default_tkt_enctypes = aes256-cts aes128-cts arcfour-hmac-md5 des-cbc-md5 des-cbc-crc
        permitted_enctypes = aes256-cts aes128-cts arcfour-hmac-md5 des-cbc-md5 des-cbc-crc
        dns_lookup_realm = true
        dns_lookup_kdc = true
        udp_preference_limit = 0

[domain_realm]
	.cloud.nomblot.org = NOMBLOT.ORG
        .nomblot.org = NOMBLOT.ORG

[realms]
        NOMBLOT.ORG = {
                kdc = srv003.nomblot.org.com:88
                kpasswd_server = srv003.nomblot.org:464
        }

[global]
        server string = %h
        workgroup = NOMBLOT
        realm = nombot.org
        security = ads
        domain master = no
        local master = no
        allow trusted domains = no
        socket options = TCP_NODELAY
        template homedir = /home/%U
        template shell = /bin/bash
        kerberos method = secrets and keytab
	password server = *
	client ntlmv2 auth = yes

        idmap config NOMBLOT:backend = ad
        idmap config NOMBLOT:default = yes
        idmap config NOMBLOT:schema_mode = rfc2307
        idmap config NOMBLOT:range = 500 - 300000000
	idmap config *:backend = ad
        idmap config *:range = 500 - 300000000

	
        idmap cache time = 1209600
        idmap negative cache time = 1209600
	username map cache time	= 300
	winbind cache time = 300
	
        winbind expand groups = 10
        winbind use default domain = yes
	winbind refresh tickets = yes
        winbind nss info = rfc2307
        winbind offline logon = yes
        winbind enum users = no
        winbind enum groups = no
	winbind nested groups = yes
	winbind reconnect delay = 5

	# bug winbind, if set to yes cause winbind cache ignored
	winbind normalize names = no


        dns proxy = no
        log file = /var/log/samba/log.%m
	log level = 0 idmap:0 winbind:1
        max log size = 1000
        obey pam restrictions = yes
        pam password change = yes
	name resolve order = host
	create krb5 conf = no
	private dir = /var/lib/samba
	state directory = /var/lib/samba
	cache directory = /var/cache/samba
	lock directory = /var/lib/samba
	pid directory = /var/run
	dos charset = ASCII
	unix charset = UTF8
	display charset = UTF8
	invalid users = root daemon bin sys sync games man lp mail news uucp proxy www-data backup list irc gnats nobody libuuid syslog messagebus colord lightdm whoopsie avahi-autoipd avahi usbmux kernoops pulse rtkit saned speech-dispatcher hplip sshd