[Samba] Problem with Active Directory authentication

[Miguel Medalha]

> (...)  By default a samba AD DC sets the login shell for all
> Active Directory user accounts to /bin/false.  The only way I've found to
> change this, is to override that globally with the "template shell =
> /bin/bash" option in smb.conf, which enables it globally for all Active
> Directory users (probably not desired).

Using RFC2307 you can give each user its own shell and home directory. 
Read here:

https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD