Samba Locked Down

i'm sorry if this has been sorted before, and if it has please direct me to the posts, but i've been searching for this for hours,


i decided that the accounts department needed a new file server, so having a copy of suse lying around, i built one for them. now i've got samba set up and connected to our Windows 2k (small business server) PDC, kerberos is working fine and from the linux box i can view all the other shares, but for some reason Samba refused to let me authenticate.

when i try to view samba from my XP box i get this (using both domain name, netbios name and ip address)

Z:\>net view \\LINUX\
System error 5  has occured

Access is denied

and if i use smbclient i get this

linux:/root/ # smbclient -k -L \\LINUX\
session setup failed: NT_STATUS_LOGON_FAILURE

if i don't use my kerberos ticket, i get asked for a password.. i tried both roots password and the PDC administrators password and i got a failure for both.

if i try to connect through network neighbourhood i get the same thing again, no way of authenticating..

here's my smb.conf dump

# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2004/09/08 14:16:39

# Global parameters
[global]
	workgroup = DOM
	realm = DOMAIN.LOCAL
	netbios name = LINUX
	server string = Samba Server
	security = ADS
	auth methods = winbindd
	password server = 192.168.0.1
	local master = No
	ldap suffix = dc=DOMAIN,dc=LOCAL
	idmap uid = 10000-20000
	idmap gid = 10000-20000
	template shell = /bin/bash
	winbind separator = +
	hosts allow = 192.168.0.

[homes]
	comment = Home Directories
	valid users = %S
	read only = No
	create mask = 0640
	directory mask = 0750
	browseable = No

[share]
	comment = accounts
	path = /ashare
	read only = No
	guest ok = Yes
	hosts allow = 192.168.0.
	profile acls = Yes
	map acl inherit = Yes

if you need any more info just let me know

any help would be greatly appreciated

i searched through my logs and tail log.smbd gives me this

[2004/09/08 15:55:36, 1] smbd/sesssetup.c:reply_spnego_kerberos(174)
  Failed to verify incoming ticket!

i can't figure out why it won't verify the ticket.. even tho' the PDC will

[edit] just upgraded samba, to no avail.. this is getting on my nerves now.. surley sharing should be simple?

The Biggest problem lies with your windows server! Microsoft small business server only supports 1 server!!!

This is one of the biggest limitations of sbs! Your samba server is theroetically the equivalent of an NT4 BDC, which cannot be connected to and SBS Domain!

There may be the usual Linux hacks to get round this but in my experience it is not possible!

Sorry to be the bearer of bad news!

oooooooooooohhhhhhhhhhhhhhhhhhhhhhhhhhhhh
that makes sense now then , so i'd be better off just using simple file/print sharing on there..

i'll have to get them to add themselves on the server and do that then