[Samba] Permission issues

[David van Laatum]

Last weekend I changed over to our new file server running Debian Lenny 64Bit 
Samba version 3.2.5... all seemed to work fine but we are getting the 
occasional file that ends up with permissions like -r--rwx---
ie the owning user has no write permission. Ive been unable to replicate but 
am told they are not new files. they seem to all be MS Office documents and the 
users just get access denied when they try and save the file. Not sure why this 
is happening but will post more info if I figure out more.

Following is an extract of part of my samba config.... Ive only included the 
accounts share but its happening on several.

[global]
   load printers = no
   security = ads
   workgroup = ***************
   server string = File Store
   realm = *************
   password server = ***********
   wins server = **************
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 100
   log level = 0
   panic action = /usr/share/samba/panic-action %d
   encrypt passwords = true
   idmap backend = ad
   passdb backend = tdbsam
   idmap uid = 100-90000
   idmap gid = 100-90000
   winbind cache time = 300
   winbind nss info = rfc2307
   winbind enum groups = yes
   winbind enum users = yes
   winbind use default domain = yes
   winbind separator = /
   winbind nested groups = yes
   template homedir = /home/%U/homedir
   template shell = /bin/bash
   debug uid = yes
   obey pam restrictions = yes
   idmap alloc backend = tdb
   idmap alloc config:range = 90000-100000

[Accounts]
  comment = Accounts Stuff
  path = /filestore/accounts
  guest ok = no
  browseable = yes
  valid users = @accounts group
  writable = yes
  force create mode = 0660
  force directory mode = 0770
  fstype = EXT3
  hide unreadable = yes
  dos filemode = yes
  acl map full control = yes