[Samba] Control users from only PDC

[SPURGEON_MATHEW_D at LILLY.COM]

Is there a way to have users of the samba server, but not add them by 
smbpasswd -a <UserID>?

I want the samba server to be a domain member and the users to only 
authentic from the PDC.  These are the steps that I have attempted:

Users are in both the Windows domain and the UNIX NIS account

1.  smbpasswd -j AM -r PDC -U <admin>
        Joined the AM Domain
2.  edited the smb.conf file
        [global]
        # workgroup = NT-Domain-Name or Workgroup-Name
        workgroup = AM 
        netbios name = SUNTST1
        server string  = SUNTST1
        max log size = 0
        security = domain 
        password server = 40.1.142.11
        encrypt passwords = yes
        username map = /usr/local/samba/lib/username.map
        max open files = 30000
        oplocks = No
        smb passwd file = /etc/samba/smbpasswd
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        remote browse sync =  40.1.142.11 40.25.17.9 40.25.12.26 
40.1.129.224 40.1.129.225
        remote announce =  40.1.142.11 40.25.17.9 40.25.12.26 40.1.129.224 
40.1.129.225
        wins proxy = yes
        dns proxy = yes 
3.  restarted the samba server
4.  From windows "search for computer"  suntst1 unknown

4a.  If I add the my userid to the smbpasswd -a <userid>
        newpasswd = Windows Password
4b.  From windows "search for computer"  suntst1 AM samba server

If I need to add the users to the smbpasswd file; how do I make so that I 
do not need to create a password on the UNIX samba server for the user?


Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
mspurgeon at lilly.com