FreeBSD в AD Windows

Буду приводить основные параметры без которых не работает.

/etc/rc.conf

hostname="samba-test.ltd.local"
smbd_enable="YES"
nmbd_enable="YES"
winbindd_enable="YES"
/etc/nsswitch.conf
group: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: files winbind
passwd_compat: nis
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files
/etc/krb5.conf
[logging]
default = FILE:/var/log/kerberos/krb5libs.log
kdc = FILE:/var/log/kerberos/krb5kdc.log
admin_server = FILE:/var/log/kerberos/kadmind.log
[libdefaults]
ticket_lifetime = 24000
dns_lookup_realm = false
dns_lookup_kdc = false
kdc_req_checksum_type = 2
checksum_type = 2
ccache_type = 1
forwardable = true
proxiable = true
[realms]
LTD.LOCAL = {
kdc = dc01.ltd.local
admin_server = dc01.ltd.local
default_domain = ltd.local
}
[domain_realm]
.ltd.local = LTD.LOCAL
/usr/local/etc/smb.conf
[global]
dos charset = cp866
unix charset = koi8-r
display charset = koi8-r
workgroup = LTD
realm = LTD.LOCAL
server string = Samba Server
security = ADS
auth methods = winbind
log file = /var/log/samba/log.%m
max log size = 50
load printers = No
domain master = No
dns proxy = No
winbind enum users = Yes
winbind enum groups = Yes
winbind nested groups = No
winbind refresh tickets = Yes
idmap config * : range = 600-20000
idmap config * : backend = tdb
case sensitive = No
[homes]
comment = Home Directories
read only = No
browseable = No
[test]
comment = Windows shared resource
path = /usr/test
valid users = @LTD\samba
admin users = @LTD\samba
read only = No
/etc/resolv.conf
domain ltd.local
search ltd.local
nameserver 10.10.10.11

Перед тем как вводить самбу в домен у меня была настроена синхронизация часов с контроллером домена:

Установить зону можно следующим образом:

cp /usr/share/zoneinfo/Europe/Kiev /etc/localtime

Синхронизируем время вручную через net time set или врубаем ntpd и там прописываем сервер, с которым будем синхронизировать время