authconfig --test
caching is enabled
nss_files is always enabled
nss_compat is disabled
nss_db is disabled
nss_hesiod is disabled
 hesiod LHS = ""
 hesiod RHS = ""
nss_ldap is enabled
 LDAP+TLS is disabled
 LDAP server = "ldap://main-fff.com/"
 LDAP base DN = "dc=main-fff,dc=com"
nss_nis is disabled
 NIS server = ""
 NIS domain = ""
nss_nisplus is disabled
nss_winbind is disabled
 SMB workgroup = "MAIN-FFF"
 SMB servers = ""
 SMB security = "user"
 SMB realm = ""
 Winbind template shell = "/bin/false"
 SMB idmap uid = "16777216-33554431"
 SMB idmap gid = "16777216-33554431"
nss_sss is disabled by default
nss_wins is disabled
pam_unix is always enabled
 shadow passwords are enabled
 password hashing algorithm is md5
pam_krb5 is disabled
 krb5 realm = "EXAMPLE.COM"
 krb5 realm via dns is disabled
 krb5 kdc = "kerberos.example.com:88"
 krb5 kdc via dns is disabled
 krb5 admin server = "kerberos.example.com:749"
pam_ldap is enabled

 LDAP+TLS is disabled
 LDAP server = "ldap://main-fff.com/"
 LDAP base DN = "dc=main-fff,dc=com"
pam_pkcs11 is disabled

 use only smartcard for login is disabled
 smartcard module = "coolkey"
 smartcard removal action = "Ignore"
pam_smb_auth is disabled
 SMB workgroup = "MAIN-FFF"
 SMB servers = ""
pam_winbind is disabled
 SMB workgroup = "MAIN-FFF"
 SMB servers = ""
 SMB security = "user"
 SMB realm = ""
pam_sss is disabled by default
pam_cracklib is enabled (try_first_pass retry=3)
pam_passwdqc is disabled ()
pam_access is disabled ()
pam_mkhomedir is disabled ()
Always authorize local users is disabled ()
Authenticate system accounts against network services is disabled

 testparm /etc/samba/smb.conf
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[printers]"
Processing section "[netlogon]"
WARNING: The "share modes" option is deprecated
Processing section "[profiles]"
Processing section "[profiles.V2]"
Processing section "[MAIN-FFF]"
Processing section "[MAIN-FFF_Photos2]"
Processing section "[Finance_Administration]"
Processing section "[HR]"
Processing section "[Projects]"
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[global]
	workgroup = MAIN-FFF
	netbios name = MAIN-FFF_SERVER
	server string = Samba Server Version %v
	passdb backend = ldapsam:ldap://main-fff.com/
	log file = /var/log/samba/%m.log
	max log size = 500
	name resolve order = wins lmhosts hosts bcast
	add user script = /usr/sbin/adduser -m "%u"
	add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u
	logon script = %u.bat
	logon path = 
	domain logons = Yes
	os level = 33
	domain master = Yes
	wins support = Yes
	ldap admin dn = "cn=config"
	ldap group suffix = ou=groups
	ldap machine suffix = ou=machines
	ldap suffix = dc=main-fff,dc=com
	ldap ssl = no
	ldap user suffix = ou=people
	idmap config * : backend = tdb
	cups options = raw

[homes]
	comment = Home Directories
	valid users = %S
	create mask = 0700
	directory mask = 0700
	browseable = No

[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	print ok = Yes
	browseable = No

[netlogon]
	comment = Network Logon Service
	path = /var/lib/samba/netlogon
	guest ok = Yes
	share modes = No

[profiles]
	comment = User profiles
	path = /var/lib/samba/profiles
	valid users = %U
	force user = %U
	read only = No
	profile acls = Yes

[profiles.V2]
	comment = User profiles
	path = /var/lib/samba/.v2
	valid users = %U
	force user = %U
	read only = No
	profile acls = Yes

[MAIN-FFF]
	comment = MAIN-FFF Stuff
	path = /home/MAIN-FFF
	write list = +amaina
	read only = No
	guest ok = Yes