samba - Jan 2004 - <user> is NOT known to account management

"is NOT known to account management" I get this error in my logs. 
I am running samba 3.0.1 in a windows 2000 domain, running in legacy
mode. 
I have joined the domain, I can browse the domain from the linux client.
However, I have problems accessing the shares on this box. I am running
redhat 9. Here is my config file:
 
[global]
            workgroup = truss
            server string = samba server
            hosts allow = 192.168.0. 192.168.1. 192.168.1. 127.
 
            printcap name = /etc/printcap
            load printers = yes
 
            printing = cups
 
 
            log file = /var/log/samba/%m.log
 
            max log size = 1024
 
            security = domain
            password server = server
 
;  password level = 8
;  username level = 8
 
            encrypt passwords = yes
            smb passwd file = /etc/samba/smbpasswd
 
;   ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt
 
            unix password sync = Yes
            passwd program = /usr/bin/passwd %u
            passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
 
            pam password change = yes
 
;  username map = /etc/samba/smbusers
 
            obey pam restrictions = yes
 
            socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 
;   interfaces = 192.168.12.2/24 192.168.13.2/24
 
            remote browse sync = 192.168.0.1
            remote announce = 192.168.0.255
 
;   local master = no
 
;   os level = 33
 
;   domain master = yes
 
;   preferred master = yes
 
;   domain logons = yes
 
;   logon script = %m.bat
;   logon script = %U.bat
 
;   logon path = \\%L\Profiles\%U
 
;   wins support = yes
 
            wins server = 192.168.0.1
 
;   wins proxy = yes
 
            guest ok = yes
            guest account = root
            dns proxy = yes
 
;  preserve case = no
;  short preserve case = no
;  default case = lower
;  case sensitive = no
 
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
 
[homes]
            comment = Home Directories
            browseable = no
            writeable = yes
            valid users = %S
            create mode = 0664
            directory mode = 0775
            map to guest = root
 
; [netlogon]
;   comment = Network Logon Service
;   path = /usr/local/samba/lib/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no
 
;[Profiles]
;    path = /usr/local/samba/profiles
;    browseable = no
;    guest ok = yes
 
[printers]
            comment = All Printers
            path = /var/spool/samba
            browseable = no
            printable = yes
 
[tmp]
            comment = Temporary file space
            path = /tmp
            writeable = yes
            invalid users = %S
 
[public]
            comment = Public Stuff
            path = /home/samba
            guest ok = yes
            writeable = yes
            printable = no
            write list = @staff
 
[root directory]
            path = /
            writeable = yes
 
[c$]
            path = /c$
            writeable = yes
            guest ok = yes
 
Thanks, 
James