[global]
   workgroup = DEPT
   realm = DEPT.INSTITUTION.CA
   netbios name = groupefs
   security = ADS
   idmap config *:backend = tdb
   idmap config *:range = 200-999
   idmap config DEPT:backend = ad
   idmap config DEPT:schema_mode = rfc2307
   idmap config DEPT:range = 1000-999999
   idmap config DEPT : read only = yes
   winbind nss info = rfc2307
   client signing = yes
   client use spnego = yes
   kerberos method = secrets and keytab
   log file = /var/log/samba/%m.log
   log level = 1 auth:5 winbind:5
   host msdfs = Yes
   hosts allow = 127.0.0.1 (...)
   hosts deny = 0.0.0.0/0
   smb ports = 445 139
   acl allow execute always = True

[homes]
        comment = homes
        read only = No
        directory mask = 0700
        force directory mode = 0700
        create mask = 0600
        force create mode = 0600
        browseable = No
        valid users = %S
        follow symlinks = yes

[recherche$]
       comment = Section Groupe Recherche
       path = /store2/share/recherche
       valid users = @recherche
       #force user = root
       force group = recherche
       read only = No
       create mask = 0660
       directory mask = 0770

[recherche2$]
       comment = Section Groupe Recherche2
       path = /store2/share/recherche2
       valid users = @recherche,user1,user2,user3
       #force user = root
       force group = recherche
       read only = No
       create mask = 0660
       directory mask = 0770