[global]
   workgroup = MOONGATE
   security = ads
   realm = MOONGATE.LOCAL
   kerberos method = secrets and keytab
   winbind refresh tickets = Yes
   vfs objects = acl_xattr
   map acl inherit = Yes
   store dos attributes = Yes

   idmap config * : backend = tdb
   idmap config * : range = 3000-7999
   idmap config MOONGATE : backend = rid
   idmap config MOONGATE : range = 10000-999999
   template shell = /bin/bash
   winbind use default domain = yes
   winbind offline logon = true

[example]
   path = /mnt/example
   read only = no
   valid users = @"MOONGATE\reconstructionlab"