[global]
    winbind cache time = 10
    template shell = /bin/bash
    template homedir = /home/%D/%U
    idmap config * : range = 3000000-4000000
    workgroup = VIRTUALNET
    realm = virtualnet.lan
    security = ADS
    password server = *
    winbind enum groups = yes
    winbind enum users = yes
    winbind nss info = rfc2307
    winbind nss info = template
    winbind normalize names = yes
    winbind use default domain = yes