Problems Authenticating NT Users Agains Domain

[Vos Alexander]

Dear all,

We have set up an HP UX 11 machine running samba 2.0.6.
The samba machine is member of the domain tflxxx and should authenticate
users again the domain and not against the local users.

The samba machine should expose the directory /data_share to a NT user group
called ggsamba (which is defined as global group on the NT PDC). The
username map attribute of the global section contains a mapping file, which
I understoud, should map unix accounts against NT accounts. In my case the
unix group unixgroup to  ggsamba.

In my case the authentication fails somehow.

Does someone has a clue how to solve the problem or where I missed
something?
As far as I understodd the mapping should surround the need to setup the
users twice?

Here is the smb.conf:
# Samba config file created using SWAT
# from 172.27.16.40 (172.27.16.40)
# Date: 2000/10/27 13:03:35

# Global parameters
[global]
	workgroup = TFLxxx
	netbios name = TFLSAMBA
	server string = Samba Server
	security = DOMAIN
	encrypt passwords = Yes
	password server = tflNTPDC
	username map = /opt/samba/domaingroup.map
	log file = /var/opt/samba/log.%m
	max log size = 2000
	domain groups = ggsamba
	local master = No
	read only = No
	short preserve case = No
	dos filetime resolution = Yes

[data_share]
	comment = data_share
	path = /data_share
	valid users = @unixgroup


The file /opt/samba/domaingroup.map 
unixgroup = ggsamba


The log for my machine contains the following
[2000/10/27 12:50:49, 0] lib/util_sec.c:(52)
  Failed to set uid privileges to (-1,-2) now set to (0,0)
[2000/10/27 12:50:49, 0] lib/util.c:(2456)
  PANIC: failed to set uid


Thanks in advance.

Kind regards,

Alexander Vos

TFL Information Technology
Networking and SAP Core

Phone:	+49 (0) 76 21 / 9 40 21 09
Fax:	+49 (0) 76 21 / 9 40 21 00
Mobile:	+49 (0) 1 71 / 5 84 91 35
Email:	alexander.vos at tfl.com
Private:	alexander.vos at t-online.de