[Samba] winbind 3.3.6 + windows 2008 ad

[Christoph Kaminski]

Ah forgotten to paste my config:

[global] 
 

     workgroup                                   = CHAOS 
 

     realm                                       = CHAOS.LOCAL 
 

     netbios name                                = moloch 
 

 
 
                           server string                               = 
%h file server (Samba %v) 

 
 
                             log file 
  = /var/log/samba/log.%m 

     max log size                                = 1000 
 

     syslog                                      = 0 
 

     panic action                                = 
/usr/share/samba/panic-action %d 

     security                                    = ADS 
 

     password server                             = beelzebub.chaos.local 
 

 
 
                             idmap backend 
  = ad 

     idmap uid                                   = 10000-20000000 
 

     idmap gid                                   = 10000-20000000 
 

     winbind nss info                            = rfc2307 
 

     winbind refresh tickets                     = yes 
 

     winbind enum users                          = yes 
 

     winbind enum groups                         = yes 
 

 
 
                             use kerberos keytab 
  = yes 

     interfaces                                  = br0 lo
     bind interfaces only                        = yes
     hosts allow                                 = 127.0.0.0/8 , 
192.168.50.0/24, 2001:6f8:1316:1234/64
     template homedir                            = /home/%D/%U
     template shell                              = /bin/bash
     winbind use default domain                  = yes
     client use spnego                           = yes
     client ntlmv2 auth                          = yes
     encrypt passwords                           = true
     restrict anonymous                          = 2
     winbind separator                           = \
     client schannel                             = no
     socket options                              = TCP_NODELAY 
SO_RCVBUF=8192 SO_SNDBUF=8192
     unix extensions                             = no