Ты специально сократил секцию global или она на самом деле такая?
Если такая то посмотри smb.conf в статье, многое опущено.
Вот мой вывод:
# testparm
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
[global]
dos charset = cp866
display charset = utf-8
workgroup = TRANSIT
realm = TRANSIT.LOCAL
server string = Slack_test
interfaces = eth0, lo
security = ADS
auth methods = winbind
allow trusted domains = No
obey pam restrictions = Yes
log file = /var/log/samba/log.%m
max log size = 1024
name resolve order = hosts wins bcast lmhosts
client signing = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
os level = 0
local master = No
domain master = No
dns proxy = No
ldap ssl = no
template shell = /bin/bash
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind refresh tickets = Yes
idmap config * : range = 10000-20000
idmap config * : backend = tdb
hosts allow = 192.168.10., 127.
case sensitive = No
strict locking = No
Очень важно все что касаемо winbind, pam и security.