samba - Oct 2003 - SAMBA 3 and ADS still doesn't work

Been working on this for the past 3 weeks and it STILL doesn't work.

Machine 1: Samba 3 on Slackware 9 - member server
Machine 2: Windows 2000 Advanced Server - PDC, AD

Machine 1 has successfully joined the domain without incident - it shows up in 
AD-Users & Computers.

kinit ADMINISTRATOR@MACHINE2 works on machine 1, accepts the correct password, 
and returns no errors.

Machine 2 sees machine 1 in the available machines in "network
neighborhood",
but any attempt to use any resource on machine 1 results in failure.  
Currently, Windows is reporting that "The account is not authorized to
login
from this station" when I attempt to browse machine 1.

I am browsing while logged in as administrator.

Does anyone have any ideas on what I am doing wrong here?  Can you help?


Here is the output from klist:

root@raid:/usr/local/samba# klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: ADMINISTRATOR@RONHOME.COM

Valid starting     Expires            Service principal
10/26/03 09:03:16  10/26/03 19:04:11  krbtgt/RONHOME.COM@RONHOME.COM
        renew until 10/27/03 09:03:16, Etype (skey, tkt): ArcFour with 
HMAC/md5, ArcFour with HMAC/md5


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
root@raid:/usr/local/samba#





-- 
Ron Gage - LPIC1, A+, Net+
Pontiac, Michigan

Ron Gage <ron@rongage.org> wrote:
> Does anyone have any ideas on what I am doing wrong here?  Can you help?
Did you try "net ads user" or "wbinfo -u"? Both should list
your domain
users.

I've found that the winbind nsswitch plugin needs to be installed to get
authentication to work. Someone will probably tell me that's wrong, but
as I needed winbind authentication for other services as well, I decided
to go with that solution. :-)  Anyway, in a strange and unforeseen
series of events, I actually documented my last samba install. If you
want to give it a shot, here's the relevant parts:

* cd to samba source dir
* # make nsswitch
* # cd nsswitch
* # sudo cp libnss_winbind.so /lib/
* # sudo ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2
* edit /etc/nsswitch.conf, add "winbind" for passwd og group
        example:
                passwd:         compat winbind
                group:          compat winbind
                shadow:         compat

After doing this, you should be able to use "getent passwd" to get a
combined list of both local and domain users.

HTH.


        Sverre