[samba] samba(pdc)+squid+winbind(ntlm)

[Usatov K.L.]

использую самбу 3.0.1 пре 1 
сквида 2.5 стабильный 1

оба собраны с подержкой нтлм и винбинда
пытаюсь поставить доменконтроллер (не АД) и проводить аутентификацию 
пользователей через нтлм.
Все работало при использовании  внешшнего домен контроллера (вин2к АД)

сейчас 
net join = ok
wbinfo -u =ok
wbinfo -g =fail
wbinfo -a user%passwd =fail

ниже привожу конф самбы
# Samba config file created using SWAT
# from 192.168.1.36 (192.168.1.36)
# Date: 2003/12/01 12:18:38

# Global parameters
[global]
        workgroup = JANUS
        realm = CH-GARANT.RU
        netbios name = WS36A
        server string = Samba Server %v
        password server = WS36A
        passdb backend = tdbsam
        log file = /var/log/samba/log.%m
        max log size = 50
        domain logons = Yes
        os level = 33
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        ldap ssl = no
        idmap uid = 500-65535
        idmap gid = 500-65535
        template homedir = /homes/%D/%U
        template shell = /bin/bash
        winbind separator = +

[homes]
        comment = Home Directories
        path = /var/cache/samba/homes
        read only = No
        hosts allow = 192.168.1.0/24
        browseable = No

[netlogon]
        comment = network logon service
        path = /usr/local/samba/netlogon
        guest ok = Yes
        share modes = No

[profiles]
        path = /usr/local/samba/profiles
        guest ok = Yes
        browseable = No

[ipc$]
        path = /var/cache/samba/ipc
        valid users = root, user, nobody, guest, ws36$, ws36a$
        admin users = root
        read only = No
        guest ok = Yes
        hosts allow = 192.168.1.0/24
        browseable = No