samba - Sep 2008 - winbind separator problem -after reboot

Hello List,

Has anyone experienced the following by chance? On a recent fresh install
of EL5 after getting Samba setup all works fine until a reboot of the
server. I then have to either uncomment or comment the ' winbind separator
= + ', then do a service smb restart, then all is fine, in regards to a
samba file share. If I do not do this i get in the samba logs '
DOMAIN+<username> is not recognized'.Once I do my uncommenting or
commenting of that one line then the shares all show up correctly. I m not
sure if it is smb.conf or winbind. I have the default version of winbind
that shipped with EL5. I used the default samba 3.23c then updated to 3.24
and both versions have done the same.
I have also found recently if I do a service winbind restart the same
holds true as a system reboot.
This is configured as a domain member to AD MS domain.Now that I know the
fix,it is a simple fix,but would like to pinpoint the problem. I sysadmin
for a 1000 student school so I need not to babysit the server if we have a
power outage and server needs to be fired back up when I m offsite.
------------------------------------------------------------------------------
smb.conf

[global]
	name resolve order = wins bcast host lmhosts
	idmap gid = 10000-20000
	vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
	cups options = raw
	idmap uid = 10000-20000
	disable netbios = yes
	local master = yes
	remote announce = 172.28.8.20/xyz
	workgroup = xyz
	server signing = auto
	debug level = 2
	os level = 65
	security = ads
#       winbind separator = +
	max log size = 50
	log file = /var/log/samba/smbd.log
	guest account = nobody
	load printers = yes
	vfs object = vscan-clamav
	wins server = 172.28.8.20
	logon drive = H:
	client use spnego = no
	domain master = no
	use spnego = yes
	encrypt passwords = yes
	winbind use default domain = no
	realm = XYZ
	template shell = /bin/bash
	netbios aliases = wcfile
	server string = Samba Server wcfile
	password server = *
	template homedir = /home/%U
        winbind enum users = yes
        winbind enum groups = yes
--------------------------------------------------------------------------

Thanks,
Barry

Still having the same prob after a couple reboots. Still have to either
uncomment or comment the winbind separator = + line. It doesnt make any
diff which it is set to. I simply have to reverse that line,then all the
shares on samba are accessible by each user. Then by doing a service smb
restart the shares are alright again.
the logs show DOMAIN+<username> is invalid.
then the uncommenting routine,,
then,,,
service smb restart
and shares are OK.
BTW: I also restart winbind each time as well.
very strange...?

Thanks,
Barry