[Samba] configuring home shares under security = ads

[brucehohl at access-4-free.com]

I've set up a Samba server using security = ads.  From
domain user "acct_spare" I can connect to share "public" but
can *not* connect to the home share for acct_spare as
follows:

filesrv1:~ # smbclient //192.168.1.53/public -U acct_spare
Password:
Domain=[XYZCOMPANY] OS=[Unix] Server=[Samba 3.0.4-SUSE]
smb: \> [OK]

filesrv1:~ # smbclient //192.168.1.53/acct_spare -U
acct_spare
Password:
Domain=[XYZCOMPANY] OS=[Unix] Server=[Samba 3.0.4-SUSE]
tree connect failed: NT_STATUS_ACCESS_DENIED
[NOT OK]

Partial smb.conf:
[global]
        workgroup = XYZCOMPANY
        realm = XYZCOMPANY.COM
        interfaces = 127.0.0.1, eth0
        bind interfaces only = Yes
        security = ADS
        map to guest = Bad User
        password server = visual1.xyzcompany.com
        socket options = TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192
        preferred master = No
        local master = No
        domain master = No
        wins server = 192.168.1.201
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind separator = /
        winbind use default domain = Yes
        printer admin = @ntadmin, root, administrator

[homes]
        comment = Home Directories
        valid users = %S
        read only = No
        browseable = No

Partial wbinfo -u
acct_spare
ACCT_SPARE$

Partial getent passwd
acct_spare:x:10002:10000:acct_spare:/home/XYZCOMPANY/acct_spare:/bin/false
ACCT_SPARE$:x:10108:10003:ACCT_SPARE:/home/XYZCOMPANY/ACCT_SPARE_:/bin/false

Thanks for any help in correcting my configuration.