Samba mit ADS Server 2008 und Windows 7

[libdefaults]

        ticket_lifetime = 24000
        clock_skew = 300
        default_realm = HOMEBASE.LOCAL

        default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
        default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
        permitted_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
        forwardable = yes

        krb4_config = /etc/krb.conf
        krb4_realms = /etc/krb.realms
        kdc_timesync = 1
        ccache_type = 4
        forwardable = true
        proxiable = true

        v4_instance_resolve = false
        v4_name_convert = {
        host = {
        rcmd = host
        ftp = ftp
        }
        plain = {
        something = something-else
        }
        }
        fcc-mit-ticketflags = true

[realms]

        HOMEBASE.LOCAL = {
                kdc = hom-srv-ads-001.homebase.local
                admin_server = hom-srv-ads-001.homebase.local
        }

[domain_realm]

        .homebase.local = HOMEBASE.LOCAL
        homebase.local = HOMEBASE.LOCAL

[login]

        krb4_convert = true
        krb4_get_tickets = false

[logging]

        default = FILE:/var/log/krb5.log

[appdefaults]

        pam = {
        debug = false
        ticket_lifetime = 36000
        renew_lifetime = 36000
        forwardable = true
        krb4_convert = false
        }

[global]

  security = ads
  realm = HOMEBASE.LOCAL
  password server = 192.168.100.10     #IP des Domain Controllers
  workgroup = HOMEBASE
  idmap uid = 10000-20000
  idmap gid = 10000-20000
  winbind enum users = yes
  winbind enum groups = yes
  winbind cache time = 10
  winbind use default domain = yes
  winbind separator = +
  template homedir = /home/%U
  template shell = /bin/bash
  client use spnego = yes
  client ntlmv2 auth = yes
  encrypt passwords = yes
  restrict anonymous = 2
  domain master = no
  local master = no
  preferred master = no
  os level = 0
  server string = %h server
  log file = /var/log/samba/log.%m
  max log size = 1000
  syslog = 0
  panic action = /usr/share/samba/panic-action %d
  obey pam restrictions = yes
#  passdb backend = tdbsam


  [Share]

  comment = Share Daten
  path = /share
  valid users = @HOMEBASE+ntfs_share
  writeable = yes
  browseable = yes
  force directory mode = 775
  force group = ntfs_share

passwd: compat winbind
group: compat winbind
shadow: compat

[2010/10/26 22:06:01,  0] lib/util_sock.c:read_socket_with_timeout(939)
[2010/10/26 22:06:01,  0] lib/util_sock.c:get_peer_addr_internal(1676)
  getpeername failed. Error was Der Socket ist nicht verbunden
  read_socket_with_timeout: client 0.0.0.0 read error = Die Verbindung wurde vom Kommunikationspartner zurückgesetzt.