Comment 7 for bug 1693418

/etc/samba/smb.conf

# Global parameters
[global]
        workgroup = Domain
        realm = Domain.tld
        netbios name = PDC
        server role = active directory domain controller
        dns forwarder = 192.168.216.1
        allow dns updates = nonsecure and secure
        idmap_ldb:use rfc2307 = yes
        time server = yes
        ntp signd socket directory = /var/lib/samba/ntp_signd/
        ldap server require strong auth = no
        wins support = Yes
        preferred master = yes
        domain master = yes
        local master = yes
        os level = 100
        log level = 1 passdb:5 auth:5
[netlogon]
        path = /var/lib/samba/sysvol/Domain.tld/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No