Hi All OK, I've followed the instructions to the letter. I cannot get winbindd to work. Here is the output from winbindd -i -d 5 load_client_codepage: loading codepage 850. load_unicode_map: loading unicode map for codepage 850. added interface ip=192.168.0.253 bcast=192.168.0.255 nmask=255.255.255.0 establishing connections server: dc=, pwdb_init=0, lsa_hnd=0 resolve_lmhosts: Attempting lmhosts lookup for name SBSFOR<0x1c> getlmhostsent: lmhost entry: 127.0.0.1 localhost resolve_wins: Attempting wins lookup for name SBSFOR<0x1c> resolve_wins: WINS server resolution selected and no WINS servers listed. name_resolve_bcast: Attempting broadcast lookup for name SBSFOR<0x1c> bind succeeded on port 0 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 1 socket option SO_BROADCAST = 1 Could not test socket option TCP_NODELAY. socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 65535 socket option SO_RCVBUF = 65535 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 Sending a packet of len 50 to (192.168.0.255) on port 137 Received a packet of len 62 from (192.168.0.10) port 137 nmb packet from 192.168.0.10(137) header: id=5433 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=SBSFOR<1c> rr_type=32 rr_class=1 ttl=300000 answers 0 char ...... hex E000C0A8000A Got a positive name query response from 192.168.0.10 ( 192.168.0.10 ) bind succeeded on port 0 Sending a packet of len 50 to (192.168.0.10) on port 137 Sending a packet of len 50 to (192.168.0.10) on port 137 could not find any domain controllers for domain SBSFOR OK, so this is what I've tried so far. I've put my PDC in the LMHOSTS file on the samba server. I've made the samba server a wins server. These all work, I get a positive name query for each. Joining the domain works fine. However, I cannot set 'password = *' in my smb.conf file, I have to explicitly tell samba which server is the password server. I cannot connect to samba shares otherwise. wbinfo -t says ... "Could not check secret" wbinfo -u say "Error looking up domain users" So, if I read this right, winbind is finding my PDC through name resolution, bind in this case, but when it tries to check it, it get's no response. Assuming that I've set winbind up properly, would this indicate a fault in my NT box. All my M$ clients see the box as the PDC. The only thing that might be weird with the PDC is taht it was promoted from a BDC when I upgraded our network and got rid of our old PDC. I'd really like to get this to work, it sounds like a great idea from the samba people. Please excuse the cross post of this to samba and samba domain. If any more info is needed by all the gurus, don't hesitate to ask. Thanks Hans