[Samba] problems with DFS

[Henrik Beckman]

Hi,

We have been a samba shop since way back and have used DFS quit a lot the
last years.
When we went with security ads instead of domain our dfs died.
We have tried 3.028(sun) in solaris wich we are leaving and 3.2.1 in linux,
our migration target.

For our 3.2.1 installation the config looks liket this and the problem
manifests itself as a empty share.

[Global]
kernel oplocks = False
oplocks = False
level2 oplocks = False
realm = SGU.SE
workgroup = SGU
netbios name = fs4
server string = fs4
security = ADS
use kerberos keytab = true
password server = ad1 ad2
wins server = 10.1.9.10 10.1.9.9
name resolve order = ads hosts wins bcast

map to guest = Bad User
disable netbios = No
log level = 5
client use spnego = Yes
server signing = auto
host msdfs = Yes
#msdfs root = Yes
ntlm auth = No
lanman auth = no

dos charset = ISO8859-1
unix charset = ISO8859-1

winbind trusted domains only = yes

[drift-a]
        msdfs root = Yes
        path = /export/dfsroot
        read only = no
        guest ok = yes

ls -l in /export/dfsroot
drift-a -> msdfs:filer2\drift-a

Domain servers are 2008 for, domainlevel is still 2003.
We have all our users both in Unix LDAP and AD so we map username to
username, no idmap ranges.


HELP!

/Henrik