[Samba] domain member login

[Sonic]

On Tue, Jun 3, 2025 at 1:24 PM Rowland Penny via samba
<samba at lists.samba.org> wrote:
> I think you need to describe your set up in a bit more detail, starting
> with your smb.conf

I did need a local user to install the OS and for various reasons I
may want others.
When I create a local user via the GUI (KDE Plasma) the home dir gets
700 perms, when I log in the first time with a domain user their home
dir gets 755 perms (/home/DOMAIN/username).

smb.conf:
======================================
[global]
        realm = OFFICE.DOMAIN.COM
        security = ADS
        server role = member server
        workgroup = DOMAIN
        idmap config domain : range = 10000-999999
        idmap config domain : backend = rid
        idmap config * : range = 3000-7999
        idmap config * : backend = tdb
        template homedir = /home/%D/%U
        template shell = /bin/bash
        kerberos method = secrets and keytab
        winbind refresh tickets = true
        winbind use default domain = true
======================================

Thank you,
Chris