Код:

[global]
        security = ads
        realm = MAG.LOCAL
#        password server = 192.168.2.253
        workgroup = MAG
#       winbind separator = +
        #idmap uid = 10000-20000
        #idmap gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes
        template homedir = /home/%D/%U
        template shell = /bin/bash
        client use spnego = yes
        client ntlmv2 auth = yes
        encrypt passwords = yes
        winbind use default domain = yes
        restrict anonymous = 2
        domain master = no
        local master = no
        preferred master = no
        os level = 0

       map to guest = Bad Password
       winbind enum users  = yes
       winbind enum groups = yes
       # Default idmap config used for BUILTIN and local accounts/groups
       idmap config *:backend = rid
       idmap config *:range = 2000-19999
       idmap config *:base_rid = 0
       # idmap config for domain MAG
       idmap config MAG:backend = ad
       idmap config MAG:schema_mode = rfc2307
       idmap config MAG:range = 20000-99999


[upload]
path = /media/root/date/upload
writeable = yes
available = yes
public = yes
guest ok = yes
force user = nobody
force group = nobody

Код:

[logging]
        Default = FILE:/var/log/krb5.log

[libdefaults]
        ticket_lifetime = 24000
        clock-skew = 300
        default_realm = MAG.LOCAL


[realms]
        MAG.LOCAL = {
                kdc = rezerv.mag.local:88
                admin_server = rezerv.mag.local:464
                default_domain = mag.local       
        }

[domain_realm]
        .mag.local = MAG.LOCAL
        mag.local = MAG.LOCAL