consult the smb.conf, except for the -A option. The only issue reason these are in at all is due to some circular dependencies, and the need to put some authenticaion over the winbind pipe (so the username/password -A can be set by winbindd, but only by a root client). That's why all the lp_*() users have HACK written above them... Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net