winbindd and Domain password server not available

[scott]

perhaps im trying to use winbindd incorrectly, but i want to set up
samba so users on a nt4.0 pdc can access samba shares as their nt
login name.  the samba computer seems to have joined the nt domain
correctly, and wbinfo -u spits out:
debian:/usr/local/samba/bin# ./wbinfo -u
CHS-LIB+Administrator
CHS-LIB+BackupAdmin
etc-

however, when i try to access the samba shares, the samba logfile for the
nt computer im using to access samba shows:
[2001/10/26 02:56:48, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
  cli_nt_setup_creds: auth2 challenge failed
[2001/10/26 02:56:48, 0]
smbd/password.c:connect_to_domain_password_server(1372)
  connect_to_domain_password_server: unable to setup the PDC
credentials to machine CHS-LIB-NT-S. Error was :
NT_STATUS_ACCESS_DENIED.
[2001/10/26 02:56:48, 0] smbd/password.c:domain_client_validate(1591)
  domain_client_validate: Domain password server not available.
[2001/10/26 02:56:51, 0] lib/util_sock.c:read_socket_data(478)
  read_socket_data: recv failure for 4. Error = Connection reset by
peer
[2001/10/26 02:56:58, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED

any idea what the problem is?  im trying to access the samba shares as
CHS-LIB+Administrator, with CHS-LIB being the domain; is that the
proper username syntax?

my smb.conf is setup as follows:
[global]
   workgroup = CHS-LIB
   server string = Samba Server
   hosts allow = 192.168.1. 192.168.0. 127. 10.80.90. 10.80.190.
   log file = /usr/local/samba/var/log.%m
   max log size = 50
   security = domain
   password server = CHS-LIB-NT-S 10.80.190.120 chs-lib-nt-s
# CHS-LIB-NT-S is the pdc for CHS-LIB, and 10.90.190.120 is the ip.
   encrypt passwords = yes
   socket options = TCP_NODELAY
   local master = no
   domain master = no
   dns proxy = no
   winbind separator = +
   winbind uid = 10000-20000
   winbind gid = 10000-20000
   winbind enum users = yes
   winbind enum groups = yes
   template homedir = /home/%D/%U

[homes]
   comment = Home Directories
   browseable = no
   writable = yes

any help would be greatly appreciated. :)

-socott barnes

-- 
aim:         geekstock
efnet irc:   stock
email: 	     stock at stawk.com	stock at fishcracker.com