[Samba] Hide unreadable, strange problem

[Sten Sletbak]

The "hide unreadable = yes" option gives strange results with samba 3.x.
Everything works fine when the server runs as a domain controller. Users
see the directories they are supposed to (unix group permission) in the
share. Turning off domain control and setting "security = DOMAIN",
however, hides every directory in the share unless you are an admin user.
I can cd to the directories with the appropriate permissions with
smbclient, but the content is invisble.
                                                                                                                                                             
Googling, tethereal and max samba loglevel came up with nothing as far as
I could see, so I am stumped.
                                                                                                                                                             
Any pointers, hints, solutions would be appreciated as I want to
move the BDC service away from this server (it hosts roaming profiles and
shared files).
                                                                                                                                                             
Setup:
                                                                                                                                                             
Red Hat Enterprise Linux AS,release 3 (Taroon Update 1)

Samba Version 3.0.2a-1, built from samba-3.0.2a-1.src.rpm

Linux 2.4.21-9.EL                                                                                                                                                             
No acls.
                                                                                                                                                             
[global]
        workgroup = OURDOMAIN
        netbios name = SERVER
        server string = Felles
        encrypt passwords = Yes
        passdb backend = mysql:mysql
        mysql:mysql host = samba-mysql
        mysql:mysql user = sambauser
        mysql:mysql password = xxxx
        mysql:mysql database = samba
        domain master = No
        domain logons = Yes
        change notify timeout = 600
        socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192
        os level = 100
        preferred master = True
        local master = Yes
        dns proxy = No
                                                                                                                                                             
ls -l /data/felles
                                                                                                                                                             
drwxr-x---    5 root     est          4096 May  5  2002 est
                                                                                                                                                             
[files]
        comment = Common files
        path = /data/felles
        create mask = 0660
        directory mask = 0770
        read only = no
        hide unreadable = yes
        veto oplock files = /.xls/.mdb/
                                                                                                                                                             
Sten