[global]

workgroup = HYTEST
realm = HYTEST.HELSINKI.FI
security = ads
kerberos method = dedicated keytab
dedicated keytab file  = /etc/krb5.keytab

idmap config HYTEST:backend = ad
idmap config HYTEST:range = 70000-1999999
idmap config HYTEST:readonly = yes
idmap config HYTEST:schema_mode = rfc2307

idmap alloc backend = tdb
idmap cache time = 0
idmap negative cache time = 0
winbind nss info = rfc2307
winbind normalize names = yes
winbind use default domain = yes
winbind rpc only = no
winbind refresh tickets = true
winbind enum users = yes
winbind enum groups = yes
client use spnego = yes

template shell = /sbin/nologin
template homedir = /tmp/%D/%U

[test] 
path = /tmp
read only = no

## EOF ##