Domain authentication with a Windows 2000 PDC

[Auleta, Michael]

I've successfully added my Samba 2.2.2 server running Solaris 8 to my
Windows 2000 domain.  Now I'm unable to access any shares.  I set up logging
on smbd to 3, and when I try to access the samba server I see this in the
log file:

smbd/password.c:connect_to_domain_password_server(1372)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine PDC. Error was : NT_STATUS_ACCESS_DENIED.

My smb.conf is set for domain security, I specify my password server(s),
domain logons are set to yes, and I'm using a usermap file.  The log file
shows the correct mapping of the NT -> UNIX id, but it almost  appears as if
instead of sending the NT user id to the PDC, it's sending the UNIX id.

If I back down to server security, I can map drives.  Am I missing anything?

Mike