[global]

    workgroup = ES
    printing = cups
    printcap name = cups
    printcap cache time = 750
    cups options = raw
    map to guest = Bad User
    include = /etc/samba/dhcp.conf
    logon path = \\%L\profiles\.msprofile
    logon home = \\%L\%U\.9xprofile
    logon drive = P:
    idmap gid = 10000-20000
    idmap uid = 10000-20000
    realm = ES.AD.PP.COM
    security = ADS
    template homedir = /home/%D/%U
    template shell = /bin/bash
    winbind use default domain = true
    domain logons = No
    domain master = No
    password server = hyrdswsesdc1.ES.AD.PP.COM
    wins support = No
    usershare allow guests = No

cat /etc/krb5.conf [libdefaults]

    default_realm = ES.AD.PP.COM
    clockskew = 300

[realms]

ES.AD.PP.COM = { kdc = hyscswsesdc1.es.ad.pp.com default_domain = es.ad.pp.com admin_server = hyscswsesdc1.es.ad.pp.com }

EXAMPLE.COM = { kdc = kerberos.example.com admin_server = kerberos.example.com }

[logging]

    kdc = FILE:/var/log/krb5/krb5kdc.log
    admin_server = FILE:/var/log/krb5/kadmind.log
    default = SYSLOG:NOTICE:DAEMON

[domain_realm]

    .es.ad.pp.com = ES.AD.PP.COM

[appdefaults]

pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 1 try_first_pass = true external = sshd use_shmem = sshd }