[Samba] "Access denied" errors with version 3.0.20

[ML Samba]

Samba version 3.0.20 running on FreeBSD 5.4-Stable.

Certain users on certain machines are losing access to my
fileserver--one moment things are working and the next, they don't
work.  I can't figure out how to regain connectivity for those users
on those workstations (running Win XP Pro).

Please help!

At about 08:15 on 3 Oct 2005 I was able to save a log file of the
problem in action.  Level 10 log file can be found at
http://www.smartrafficenter.org/kevin/log.10.5.51.27, smb.conf posted
below.

Thanks,
Kevin


----- 8< -----

[global]

   log level = 10
   workgroup = VIRGINIADOT
   server string = STC Data Server
   security = ads
   load printers = no
   log file = /var/log/samba/log.%m
   max log size = 4096
   password server = VDOTHR01.VIRGINIADOT.ORG
   encrypt passwords = yes
   realm = VIRGINIADOT.ORG
   passdb backend = tdbsam
   allow trusted domains = no
   idmap backend = idmap_rid:VIRGINIADOT=2000-100000000
   idmap uid = 2000-100000000
   idmap gid = 2000-100000000
   template shell = /usr/local/bin/bash
   template homedir = /raid5/home/%U
   winbind use default domain = yes
   winbind enum users = no
   winbind enum groups = no
   winbind nested groups = yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   local master = no
   preferred master = no
   domain logons = no
   wins server = 10.15.48.3
   dns proxy = no

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   oplocks = yes

[Public]
   comment = Public Transfer Diretories
   path = /raid5/public
   public = yes
   writeable = yes
   browseable = yes
   printable = no
   hide dot files = no
   force create mode = 00777
   force directory mode = 00777

[InfoTech]
   comment = STC Information Technology
   path = /raid5/shares/InfoTech
   public = no
   writeable = no
   browseable = yes
   valid users = @STC-InfoTech
   write list = @STC-InfoTech
   printable = no
   force group = STC-InfoTech
   hide dot files = no
   force create mode = 00770
   force directory mode = 00770

[PublicHTML]
   comment = STC Web page
   path=/raid5/www/data
   public = no
   writeable = no
   browseable = yes
   valid users = @STC-Webmasters
   write list = @STC-Webmasters
   read list = @STC-Webmasters
   printable = no
   force user = www
   force group = www
   hide dot files = no
   force create mode = 0774
   force directory mode = 0771

[hars]
   comment = Backup of HAR recordings
   path = /raid5/shares/HAR
   public = no
   browseable = yes
   printable = no
   hide dot files = yes
   writeable = yes
   valid users = @STC-Controllers, hars, @STC-InfoTech
   force create mode = 00755
   force directory mode = 00755
   force user = hars
   force group = STC-Controllers

[Transdyn]
   comment = Transdyn files
   path = /raid5/shares/transdyn
   public = yes
   writable = no
   browseable = yes
   printable = no
   hide dot files = no
   write list = @STC-Transdyn
   force create mode = 00775
   force directory mode = 02775
   force group = STC-Transdyn

[OpenVMS]
   comment = OpenVMS online documentation
   path = /raid5/www/OVMSDOC_0721
   public = no
   writable = yes
   valid users = @STC-Transdyn
   browseable = yes
   printable = no
   hide dot files = no
   write list = @STC-Transdyn
   force create mode = 0774
   force directory mode = 0775
   force group = STC-Transdyn

[ProjEngineer]
   comment = Project Engineer files
   path = /raid5/shares/projengineer
   public = no
   browseable = yes
   printable = no
   hide dot files = yes
   valid users = @STC-ProjEngineer
   write list = @STC-ProjEngineer
   force create mode = 00770
   force directory mode = 02770
   force group = STC-ProjEngineer

[XeroxFTP]
   comment = Xerox FTP repository
   path = /raid5/pseudo-users/xerox
   public = no
   browseable = yes
   printable = no
   hide dot files = yes
   writable = yes
   force user = xerox
   force group = users

[iMPath]
   comment = iMPath Network VDOT Training, March 2002
   path = /raid5/shares/iMPath
   public = no
   browseable = yes
   printable = no
   hide dot files = yes
   writeable = no

[NMSBackup]
  comment = Backup of HR-STC-NMS files
  path = /raid5/shares/Backup/NMS
  public = no
  browseable = yes
  force create mode = 00660
  force directory mode = 00770
  force group = STC-InfoTech
  valid users = @STC-InfoTech
  writeable = yes

# NOTE: If you have a BSD-style print system there is no need to
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
# Set public = yes to allow user 'guest account' to print
   guest ok = no
   writable = no
   printable = yes