The SWAT man pages (http://us1.samba.org/samba/docs/man/swat.8.html) says not to use the -a option on a production server (which disables authentication).