smb.conf: add identity mapping section