[global]
        workgroup = SEPLAN
        netbios name = SEPLANDATOS
        server string = Samba Server
        map to guest = Bad User
        passdb backend = ldapsam:ldap://my.domain.com:389
;       pam password change = Yes
        passwd chat = *New*Password* %n\n *Re-enter*new*password* %n\n *Password*changed*
        security = user
        passwd program = /usr/bin/smbldap-passwd %u
;       username map = /etc/samba/smbusers
;       unix password sync = Yes
        name resolve order = wins lmhosts bcast hosts
        time server = Yes
        add user script = /usr/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/sbin/smbldap-userdel -r %u
        add group script = /usr/sbin/smbldap-groupadd "%g"
        delete group script = /usr/sbin/smbldap-groupdel %g
        add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
        add machine script = /usr/sbin/smbldap-useradd -w "%u"
        set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
	 logon script = scripts\logon.bat
        logon path =
        logon drive = Z:
        logon home = \\%L\%U\.9xprofile
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        ldap admin dn = cn=admin,dc=my,dc=domain,dc=com
        ldap user suffix = ou=people
        ldap group suffix = ou=groups
        ldap machine suffix = ou=machines
        ldap passwd sync = yes
        ldap suffix = dc=my,dc=domain,dc=com
;       ldap idmap suffix = ou=idmap
        ldap ssl = no
        ldap delete dn = no
        ;ldap filter = "(&(uid=*%u*)(objectclass=sambaSamAccount))"
        #idmap backend = ldap:ldap://127.0.0.1
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        ea support = yes
        map acl inherit = Yes
        wins support = yes
        interfaces = 172.17.0.0/16, lo
;       remote announce = 192.168.101.255
;       remote browse sync = 192.168.101.255
        ;printer admin = @ntadmin, root, administrator
        force unknown acl user = yes
        enable privileges = yes
        ;winbind nested groups = yes
;       obey pam restrictions = yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192