[Samba] Samba 3.0.10 Authentication in an NT4 Domain

[Joe Borne]

I'm trying to set up a Samba file server inside of an NT4 domain. I'm
using Samba 3.0.10 My config files are at the bottom of this post.

The server appears on the windows network inside the domain called for
in it's smb.conf. But when you try to access it from any client which
does not have an account on the box it prompts for a user name and
password. When you enter a user name and password of a user on the NT4
domain, you are unable to log in. It feels as if the box is a member of
the domain, but is not getting it's users and groups lists from the
domain controller.

Can anyone tell me how to resolve this, and what mechanism handles how
the server gets this info from the domain controller?

The physical share folder is at /mnt/PublicShare with permissions of 777
and owner:group of root:root.

My smb.conf looks like this:

###########################################
# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2005/08/10 08:56:53

# Global parameters
[global]
        workgroup = CILNET
        server string = CILTESTSERVER
        security = DOMAIN
        auth methods = winbind
        password server = 10.1.0.4
        preferred master = No
        domain master = No
        wins server = 10.1.0.4
        ldap ssl = no
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind separator = /
        winbind use default domain = Yes

[PublicShare]
        comment = Public Share
        path = /mnt/publicshare
        read only = No
        guest ok = Yes
###########################################



My nsswitch.conf looks like this:

###########################################
#
# /etc/nsswitch.conf

passwd:     files winbind
shadow:     files winbind
group:      files winbind
hosts:      files dns

bootparams: nisplus [NOTFOUND=return] files

ethers:     files
netmasks:   files
networks:   files
protocols:  files winbind
###########################################