[Samba] Not able to join Debian 10 to AD using winbind

[Rowland Penny]

On Mon, 2021-10-11 at 17:01 +0100, Rowland Penny via samba wrote:
> 
> OK, I suggest you backup your existing smb.conf & krb5.conf files,
> then
> replace them with these:
> 
> /etc/samba/smb.conf

And here is the smb.conf without the contents of the user.map, that
somehow got attached :"-)

[global]
    workgroup = EMEA-MEDIA
    realm = EMEA.MEDIA.GLOBAL.LOC
    security = ADS

    dedicated keytab file = /etc/krb5.keytab
    kerberos method = secrets and keytab

    winbind offline logon = yes
    winbind refresh tickets = yes
    winbind use default domain = yes
    template shell = /bin/bash
    restrict anonymous = 2
    domain master = no
    local master = no
    preferred master = no

    idmap config * : backend = autorid
    idmap config * : range = 10000-9999999

    dns proxy = no
    # user Administrator workaround, without it you are unable to set
privileges
    username map = /etc/samba/user.map

    vfs objects = acl_xattr
    map acl inherit = Yes

    log file = /var/log/samba/log.%m
    max log size = 1000
    syslog = 0
    panic action = /usr/share/samba/panic-action %d
    obey pam restrictions = yes
    usershare allow guests = yes

[homes]
   comment = Home Directories
   browseable = no
   read only = no
   create mask = 0700
   directory mask = 0700
   valid users = %S

[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   create mask = 0700

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers

Rowland