[global]
        security = ADS
        workgroup = IN
        realm = IN.IBM.COM

        log file = /var/log/samba/samba.log
        log level = 10

        idmap config * : backend = tdb
        idmap config * : range = 3000-7999

        idmap config IN:backend = ad
        idmap config IN:schema_mode = rfc2307
        idmap config IN:range = 10000-999999
        idmap config IN:unix_nss_info = yes

        idmap config IN:unix_primary_group = yes

        template shell = /bin/sh

        winbind use default domain = Yes
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind nested groups = Yes
        winbind refresh tickets = Yes

[samba_share]
        path = /smbtest/samba/share
        public = yes
        writable = yes
        guest ok = yes
        browseable = yes