[Samba] username map is not functioning

[Shaw, Kevin]

All,

When the company upgraded AD from 2003 to 2008R2 users lost the ability to access Samba shares without being prompted for a password. I've upgraded Samba from 3.0.30 to 3.6.6. I would like to continue using username map to map my users however it appears the map is being ignored. The only way I can get this config to work is by adding an account that matches the unix account using smbpasswd. Any ideas?


[global]
        bind interfaces only    = Yes
        case sensitive          = Yes
        comment                 = Global Definitions
        create mask             = 0775
        directory mask          = 0775
        follow symlinks         = No
        guest account           = ftp
        guest ok                = No
        host msdfs              = No
        hosts allow             = 13.,127.
        hosts deny              = ALL
        idmap config * : backend = tdb
        interfaces              = nge0,lo0
        kernel oplocks          = No
        level2 oplocks          = No
        map to guest            = Bad UID
        max disk size           = 131072
        oplocks                 = No
        preserve case           = Yes
        unix extensions         = No
        lm announce             = No
        local master            = No
        max protocol            = SMB2
        min protocol            = NT1
        name resolve order      = host,bcast,wins,lmhosts
        netbios name            = TYRELL
        security                = DOMAIN
        username map            = /etc/samba/users.map
        wins server             = xxx.xxx.xxx.xxx
        workgroup               = DOMAINNAME
        log file                = /var/samba/log/log.%m
        log level               = 4
        syslog                  = 2

[ColorQube]
        path                    = /ColorQube
        writeable               = Yes
        browseable              = Yes
        create mask             = 666
        directory mask          = 777
        directory security mask = 777
        inherit permissions     = Yes
        guest ok                = Yes

[read]
        fake oplocks            = Yes
        path

Thanks in advance.
-Kevin