[Samba] Problems after changing security = domain to security = ads

[Hamish]

Hello all
I have a samba domain member authenticating to a w2k3 server, after installing 
SP1, there were problems, and a solution I found was to change to security = 
ads. This seemed to work fine, but today no-one can get their home drives, 
and some people are denied access to shares where the permissions on the 
files are rwx for the user.
I did not change anything other than the security line in smb.conf and 
rejoined the domain with `net ads join -U administrator` (this was 
successful)

I find this in the samba log when users try to connect:
[2005/06/06 13:16:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all 
old resources.
[2005/06/06 13:16:17, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
  Failed to verify incoming ticket!

I can do `kinit Administrator at MY.DOMAIN.NET` and it returns no errors (but no 
success either - if I put in a wrong password, it gives an error though, so i 
guess this is ok)

Anyone have any ideas? or can I change back to security = domain with some 
other fix?

Thanks,
H
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/20050606/e5f9533d/attachment.bin