[Samba] Share Admin

[Dennis B. Hopp]

I've got a share that I'm trying to get so I can set permissions 
through the normal windows way (right click on 
folder/file->properties->security).

The share definition is:

[test]
    comment = Test share on magellan
    path = /var/test
    browseable = yes
    writable = yes
    hide unreadable = yes
    admin users = @"Domain Admins"

The server is a member server in an AD domain.  The winbind configuration is:

  idmap backend = idmap_rid:CSC=15000-20000
   idmap uid = 15000-20000
   idmap gid = 15000-20000
   template shell = /bin/bash
   template homedir = /home/%D/%U
   winbind separator = +
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes
   winbind cache time = 10
   realm = GOCSC.COM
   allow trusted domains = no


In /var/log/messages I am seeing:

Jan 26 17:38:01 magellan winbindd[11151]: [2006/01/26 17:38:01, 0] 
lib/util_sid.c:string_to_sid(285)
Jan 26 17:38:01 magellan winbindd[11151]:   string_to_sid: Sid S-0-0 is 
not in a valid format.

When I try to save the permssions I get an "Access Denied" message.

[root at magellan samba]# ls -l /var/test
total 4
drwxr-xr-x  2 root Domain Users 4096 Jan 26 17:41 test

getfacl: Removing leading '/' from absolute path names
# file: var/test
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

The user I am trying this as is a member of Domain Admin in Active Directory.

I did some quick searching on the net and in the archives and didn't 
find anything that helped me.

samba version is 3.0.21a-1, OS is FC4 fully updated via yum.

Any ideas?

Thanks,

--Dennis