[Samba] guest ok = yes, not working(?)

[Rex Dieter]

I've setup a samba-3.0.11 share with

[General]
   guest account = ftp
   security = domain

[pub]
   comment = pub
   path = /pub
   read only = yes
   browseable = no
   guest ok = yes

And attempts to access the share from WinXP(sp2) clients anonymously fail,

Appended is the (log level 2) samba.log entries (names changed to 
protect the innocent):

[2005/02/08 13:34:30, 2] lib/util_sock.c:open_socket_out(789)
   error connecting to nt4_pdc:445 (Connection refused)
[2005/02/08 13:34:30, 3] auth/auth.c:check_ntlm_password(219)
   check_ntlm_password:  Checking password for unmapped user 
[]\[]@[WINXP-CLIENT] with the new password interface
[2005/02/08 13:34:30, 3] auth/auth.c:check_ntlm_password(222)
   check_ntlm_password:  mapped user is: [DOMAIN]\[]@[WINXP-CLIENT]
[2005/02/08 13:34:30, 3] auth/auth.c:check_ntlm_password(268)
   check_ntlm_password: guest authentication for user [] succeeded
[2005/02/08 13:34:30, 2] lib/access.c:check_access(324)
   Allowed connection from  (CLIENT_IP)
[2005/02/08 13:34:30, 2] lib/util_sock.c:open_socket_out(789)
   error connecting to nt4_pdc:445 (Connection refused)
[2005/02/08 13:34:30, 3] auth/auth.c:check_ntlm_password(219)
   check_ntlm_password:  Checking password for unmapped user 
[WINXP-CLIENT]\[Administrator]@[WINXP-CLIENT] with the new password 
interface
[2005/02/08 13:34:30, 3] auth/auth.c:check_ntlm_password(222)
   check_ntlm_password:  mapped user is: 
[DOMAIN]\[Administrator]@[WINXP-CLIENT]
[2005/02/08 13:34:30, 2] lib/util_sock.c:open_socket_out(789)
   error connecting to nt4_pdc:445 (Connection refused)
[2005/02/08 13:34:30, 0] auth/auth_domain.c:domain_client_validate(199)
   domain_client_validate: unable to validate password for user 
Administrator in domain DOMAIN to Domain controller \\MSTAT. Error
  was NT_STATUS_WRONG_PASSWORD.
[2005/02/08 13:34:30, 2] auth/auth.c:check_ntlm_password(312)
   check_ntlm_password:  Authentication for user [Administrator] -> 
[Administrator] FAILED with error NT_STATUS_WRONG_PASSWORD
[2005/02/08 13:34:30, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/02/08 13:34:30, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/02/08 13:34:30, 2] lib/util_sock.c:open_socket_out(789)
   error connecting to nt4_pdc:445 (Connection refused)