Please ignore my last message, it seems I've fixed it. I had to change the "password server" line in smb.conf to the local primary domain controller. It works now.