The original daemon is from samba 2:3.2.5-4lenny9 on Debian Lenny (Lenny being stable at the time of writing). The file /etc/samba/smb.conf passes through testparm /etc/samba/smb.conf with no problem, and it reads:

[global]
  disable netbios = yes
  workgroup = LWP
  security = user
  browseable = no
  mangled names = no
  unix extensions = yes
  map archive = no

  kernel oplocks = False

  log level = 3

  passdb backend = ldapsam:ldaps://ldapserver.mydomain.com
  ldap suffix = ou=department,o=company,c=nl
  ldap passwd sync = no
  ldap admin dn = cn=theboss,ou=linuxinstall,o=company,c=nl

  load printers = no
  printing = bsd
  printcap name = /dev/null
  show add printer wizard = no
  disable spoolss = yes

  encrypt passwords = true

  #  smb encrypt = mandatory
  #  update encrypted = yes
  #  client signing = mandatory

[homes]
  path = /linuxhome/%S
  read only = no
  guest ok = no
  browseable = no
  oplocks = False
  ea support = True
  level2 oplocks = False
  root preexec = bash -c "mkdir -m 0750 /linuxhome/%S && chown %U.%G /linuxhome/%S"

[apps]
  path = /srv/apps
  read only = yes
  guest ok = yes
  fake oplocks = yes
  locking = no