Current settings for samba in AD

[Sharif Islam]

Is this bug fixed in FC2 ?
https://bugzilla.samba.org/show_bug.cgi?id=1165

Is my smb.conf  correct?
[globa]
   netbios name = <NAME>
   server string = Samba Server
   realm = <AD REALM>
   workgroup = <WORKGROP>
   security = server #btw, security = ADS didn't work
   password server =  <AD SERVER>
   encrypt passwords = yes
   guest account = nobody
   os level = 0
   preferred master = No
   local master = No
   domain master = No
   dns proxy = No
   log file = /var/log/samba/samba.log
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   wins server = <winsserver>
   dns proxy = no
   winbind use default domain = yes
   idmap uid = 10000-600000
   idmap gid = 10000-600000
   winbind enum users = yes
   winbind enum groups = yes
   client use spnego = yes
   strict allocate = Yes
   name resolve order = wins lmhosts host bcast
   winbind cache time = 600

# rpm -qa|grep samba
system-config-samba-1.2.9-2
samba-3.0.3-5
samba-client-3.0.3-5
samba-common-3.0.3-5

I can get all the users/group from wbinfo, getent. However, when I try 
to access a share from an AD machine I get the password prompt. If I do 
a smbstatus
at that point, the user shows to be in the primary group.

-- 
Sharif Islam                                  http://www.sharifislam.com
Research Programmer                           mislam at uiuc.edu
Library Systems Office                        217-244-4688