Having got a bit further through the debugging session, I've discovered 
that my NT backup server won't in theory supply a password to Samba.
It's
also the primary domain controller - does this change the situation, or 
should I be asking if there's a more secure way than "hosts equiv"
to