samba - Dec 2003 - tree connect failed: NT_STATUS_ACCESS_DENIED

Hi,

I have been using SAMBA 2.?.? package for file serving for years and just 
upgraded to 3.0.0 via the 'samba-3.0.0-2_rh8.i386.rpm' package, now my
users
can't gain access to their own home dir's !
All other functionality seem ok PDC login works (except with win2000) running 
though the fault finding tree I get to :
smbclient -v \\\\lserver\\frank -U frank
Password:
tree connect failed: NT_STATUS_ACCESS_DENIED

Can you help me.... I don't know what this means, how to fix it ???

TIA,
	Frank.


Here is my testparams output:
[root@lserver samba]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[public]"
Processing section "[main]"
Processing section "[userpgms]"
Processing section "[acct]"
Processing section "[inventory]"
Processing section "[MITA]"
Processing section "[netlogon]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = DDI
        server string = Samba Server
        update encrypted = Yes
        pam password change = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*
        unix password sync = Yes
        log level = 3
        log file = /var/log/samba/%m.log
        max log size = 0
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        ldap ssl = no
        remote announce = 192.168.1.255
        create mask = 0777
        hosts allow = 192.168.1., 127., 192.168.2., 192.168.3., 192.168.4., 
192.168.5.
        printing = lprng

[homes]
        comment = Home Directories
        valid users = %S
        read only = No
        create mask = 0664
        directory mask = 0775
        browseable = No

[netlogon]
        comment = The Domain logon service
        path = /export/samba/logon

..................................CUT ..............................

Leo, 

Thank you, Thank you, Thank you...................

That was driving me nuts, now if only I can get my win2000 system to re-join 
our domain I'll beable to sleep tonight :)

Cheers,
>
>     I had this problem last myself, but found the solution:
>
>     Replace the parameter "valid users" for just
"users" don't use any
> more valid users on your
> configuration it will either deny access to Samba server or deny access
> to shares.
>
> Leo
>