[Samba] 'security = ads' & 'valid users ='

[Ryan Frantz]

I will be upgrading my Samba server from 2.2.8a to 3.0.10.  I currently
have security set to 'share' and plan on migrating to 'ads' for improved
authentication.  I have one snag, though...

I have remote users who reside in and are managed by a Windows domain
that is not in my control.  There is no trust relationship at all.  If I
use 'ads' security, can I add a 'valid users' line for shares they need
to access?  So that when they fail domain authentication, Samba would
check against UNIX accounts I set up specifically for those (2) users...

Example smb.conf:

[global]
  security = ads

[share1]
  comment = share for local users
  path = /some/path/share1
  ...

[share2]
  comment = share for remote users
  path = /some/path/share2
  valid users = fred,barney
  ...

ry