[Samba] Samba 3.0.0: option admin user not working in smb.conf?

[Dietrich Streifert]

Hello List!

I successfully installed, configured and joined Samba 3.0.0 on Solaris
9 to Windows 2000 Active Directory.

I tried to set the option admin user in smb.conf to user (ingres).
After doing so the user isn't able to connect or browse to the Samba
server anymore. Without this option the user just connects fine and is
able to browse the Samba server. The goal is to have the user connect
with root privileges to the Sambe share.

Any help would be great.
Thank you.

log.smbd
---------------------------------------------------------------
  smbd version 3.0.0 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2003
[2003/10/08 11:27:52, 1] lib/username.c:map_username(106)
  ##### Username Mapfile /opt/samba/private/username.map for user 
[2003/10/08 11:27:52, 1] lib/username.c:map_username(106)
  ##### Username Mapfile /opt/samba/private/username.map for user ingres
[2003/10/08 11:27:52, 0] smbd/service.c:set_admin_user(314)
  ingres logged in as admin user (root privileges)
[2003/10/08 11:27:52, 0] smbd/service.c:make_connection_snum(569)
  make_connection: connection to development denied due to security descriptor.
---------------------------------------------------------------

smb.conf:
---------------------------------------------------------------
# Samba config file created using SWAT
# from 192.168.0.2 (192.168.0.2)
# Date: 2003/10/08 10:28:36

# Global parameters
[global]
        unix charset = ISO-8859-1
        workgroup = EDELSTEIN
        realm = EDELSTEIN.DE
        security = ADS
        wins server = 192.168.0.23
        create mask = 0740
        directory mask = 0750
        username map = /opt/samba/private/username.map

[homes]
        comment = Homedirectory
        read only = No

[development]
        comment = Development
        path = /development
        read only = No
        admin users = ingres
---------------------------------------------------------------


-- 
Best Regards,
 Dietrich Streifert                 mailto:dietrich.streifert at visionet.de