[Samba] does SECURITY=ADS fall back to the smbpasswd file?

[Tim]

Quoting "Gerald (Jerry) Carter" <jerry at samba.org>:

> | So in that case, is there any way at all I can authenticate
> | both sets of users I have with the same Samba host?
> |
> | i.e. The users who have NT accounts, and the users who
> | don't (smbpasswd auth)
> 
> You can set
> 
> 	auth methods = guest sam_ignoredomain winbind:ntdomain
> 
> in the [global] section of smb.conf.  However, if there is any
> overlap in the usernames between local users and domain users,
> the local user account takes precendence.

Thanks Jerry, that fixed it!

Just cos I cant find it in the docs, whats the different between
"sam" and "sam_ignoredomain"?

Also, whats the colon mean between winbind and ntdomain?

Thanks a lot for your help,

Tim.