template homedir = /home/%U
template shell = /bin/bash

{% if winbind_idmap_backend is defined %}
idmap backend = {{ winbind_idmap_backend }}
idmap config * : backend = {{ winbind_idmap_backend }}
{% endif %}
idmap config * : range = {{ winbind_idmap_range }}

kerberos method = {{ winbind_kerberos_method }}

winbind nss info = {{ winbind_nss_info }}
winbind use default domain = {{ 'yes' if winbind_use_default_domain else 'no' }}
winbind offline logon = {{ 'yes' if winbind_offline_login else 'no' }}
winbind refresh tickets = {{ 'yes' if winbind_refresh_tickets else 'no' }}
{% if winbind_ignore_domains|d %}
winbind:ignore domains = {{ winbind_ignore_domains|join(' ') }}
{% endif %}

client ldap sasl wrapping = seal

dns proxy = no
domain master = no
local master = no
preferred master = no
os level = 0