global]
        idmap gid = 10000-20000
        idmap uid = 10000-20000
        realm = FOO.EXAMPLE
        security = ADS
        template homedir = /home/%D/%U
        template shell = /bin/bash
        usershare allow guests = No
        winbind offline logon = yes
        winbind refresh tickets = yes
        workgroup = FOO
        winbind use default domain = yes