[Samba] Shares mount on linux but not windows?

[Brian Atkins]

OK, here's a strange twist:

[2006/12/08 17:45:17, 2] smbd/service.c:make_connection_snum(580)
   user 'ubackup' (from session setup) not permitted to access this 
share (batkins)
[2006/12/08 17:45:17, 3] smbd/error.c:error_packet(146)
   error packet at smbd/reply.c(676) cmd=117 (SMBtconX) 
NT_STATUS_ACCESS_DENIED

I'm logged in under my own user account (batkins), but it is trying to 
authenticate me using the user account ubackup, both of which are AD 
accounts.

Brian
"An adventure is never an adventure
when it's happening.  Challenging
experiences need time to ferment,
and an adventure is simply physical
and emotional discomfort recollected
in tranquility." -- Tim Cahill

Brian Atkins wrote:
> Curious. I have a gentoo server running 3.0.23d that simply serves out 
> shares. It is a domain member, but not a pdc. From another linux server, 
> I can mount up shares without a hitch. But from a windows box, I keep 
> getting prompted for credentials.
> 
> I am not seeing anything substantial in the logs.
> 
> SMB.CONF
> --------
> [global]
>         workgroup = UNICITY
>         realm = MYREALM.MYDOMAIN.COM
>         netbios name = SERVER
>         server string = SERVER
>         interfaces = 192.168.56.26 127.
>         bind interfaces only = yes
>         security = ADS
>         log file = /var/log/samba/log.%m
>         max log size = 8164
>         name resolve order = hosts wins bcast
>         socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
>         os level = 5
>         preferred master = no
>         local master = no
>         domain master = no
>         dns proxy = no
>         wins proxy = no
>         wins server = 192.168.57.124
>         template shell = /bin/bash
>         unix extensions = no
>         winbind enum users = yes
>         idmap uid = 10000-20000
>         idmap gid = 10000-20000
>         winbind uid = 10000-20000
>         winbind gid = 10000-20000
>         winbind enum groups = yes
>         winbind separator = +
>         winbind use default domain = yes
>         encrypt passwords = yes
>         hosts allow = 192.168. 127.
>         load printers = no
>         smb ports = 139
> 
> [myshare]
>         comment = My fileshare
>         path = /home/MYDOMAIN/myhome
>         invalid users = root
>         valid users = me
>         public = no
>         writable = yes
>         printable = no
>         create mask = 0777
>         directory mask = 0777
>