Samba member server config

etc_krb5.conf

[logging]
  default = FILE:/var/log/krb5libs.log
  kdc = FILE:/var/log/krb5kdc.log
  admin_server = FILE:/var/log/kadmind.log

[libdefaults]
  default_realm = CRCCMINISTRIES.COM
  #ticket_lifetime = 24h
  forwardable = yes

[appdefaults]
  pam = {
    debug = false
    #ticket_lifetime = 36000
    #renew_lifetime = 36000
    forwardable = true
    krb4_convert = false
  }

etc_nsswitch.conf

# update these lines:
passwd:         compat winbind
group:          compat winbind

etc_samba_smb.conf

[global]
  workgroup = CRCCMINISTRIES
  netbios name = logos
  server string = Samba Server Version %v
  security = ads
  realm = CRCCMINISTRIES.COM
  socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=131072 SO_SNDBUF=131072
  use sendfile = true

  idmap config * : backend = tdb
  idmap config * : range = 100000-299999
  idmap config CRCCMINISTRIES : backend = rid
  idmap config CRCCMINISTRIES : range = 10000-99999

  winbind separator = +
  winbind enum users = yes
  winbind enum groups = yes
  winbind use default domain = yes
  winbind refresh tickets = yes

  restrict anonymous = 2
  log file = /var/log/samba/log.%m
  max log size = 50

  template shell = /bin/bash

[users]
  comment = User data
  path = /data/users
  read only = no
  force group = "Domain Users"
  directory mask = 0770
  force directory mode = 0770
  create mask = 0660
  force create mode = 0660

etc_sysctl.d_40-ipv6.conf

# I had to disable ipv6 due to some weird intermittent lag (needs more investigation)
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.nic0.disable_ipv6 = 1
net.ipv6.conf.nic1.disable_ipv6 = 1