[Samba] Group mapping question

[Michael Dunne]

Greetings,

I am hopeful that someone can assist me with what I am certain is a 
simple misconfiguration. I am running a smb server on RHEL5.2, the 
version of samba is 3.2.1. I am having a heck of a time getting group 
maps to work.

The problem is as followed: Share called "office" need to be accessible 
to a group of windows users. The share shows filesystem permissions of 
drwxrwx--x   50 user  office. I have mapped the unix group office to a 
domain group called staff assistants.

net groupmap list
staff assistants (S-1-5-21-3185994284-2127990412-3136590628-1007) -> office

Yet, I am still unable to access any files in the share from windows. I 
receive a permission denied error.

Output of testparm is below.

Thanks in advance for any assistance!

Mike

[global]
    workgroup = OFFICE
    realm = OFFICE.MATH.PSU.EDU
    server string = MathNet Samba Server %v
    security = ADS
    password server = dogwood.math.psu.edu
    passdb backend = tdbsam:/etc/samba/passdb.tdb
    username map = /etc/samba/users.map
    log level = 3
    printcap name = cups
    ldap ssl = no
    idmap backend = ad
    idmap uid = 10000-20000
    idmap gid = 10000-20000
    winbind enum users = Yes
    winbind enum groups = Yes
    winbind use default domain = Yes
    winbind nss info = rfc2307
    hosts allow = 146.186.130., 146.186.132., 146.186.134.29, localhost

[homes]
    read only = No
    browseable = No
    posix locking = No

[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    browseable = No

[print$]
    comment = Windows Print Drivers
    path = /etc/samba/drivers
    write list = root

[julieandmary]
    comment = Share for Julie and Mary
    path = /home/fourier2/office/JulieandMary
    valid users = @officeexams
    read only = No
    create mask = 00
    force create mode = 0660
    force directory mode = 0770
    posix locking = No

[office]
    path = /home/fourier2/office
    write list = @office
    acl group control = Yes
    inherit permissions = Yes
    inherit acls = Yes
    posix locking = No