samba - Mar 2005 - Deny access of a defined account logging in from special machines

Hallo list,
I want to migrate from an old NT-domain to samba (version 3). In the NT-domain
it was possible to prohibit that a special user could log in from every host of
the domain. You could specify from which computers this account was able to
authenticate against the domain controller.
Example:
account rainer
computer A, B, C, D
Login of rainer from A to the PDC: allowed
Login of rainer from B to the PDC: allowed
Login of rainer from c to the PDC: denied
Login of rainer from D to the PDC: denied

I wish to implement this feature also in the new samba-domain. I tried to use
"root preexec" and a self-made script to achieve this, but without
success.

Please give me an advice. Perhaps there are already examplescripts you can hand
me over.

rainer


__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need.

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp