Let have an samba PDC (oceanic) and samba domain member (beabourg).

on beabourg we have an share:

[private]
        path = %H
        valid users = +users
        read only = No
        create mask = 0600

let have an user solarz:
[root@beabourg samba]# id -a solarz
uid=1761(solarz) gid=100(users) groups=100(users),512(Domain Admins),101(staff),303(biblioteka),1004(bsi),1005(terminal-max),1006(terminal),1007(sas),1008(spss),1010(vnc-users),1011(studencien),1013(dziekanatwitz),1014(sourcesafe),1016(grafika-adm),1019(pob-rw),1020(windykacja),1021(projektbr)

if on beabourg winbind is stopped user solarz can log into \\beabourg\private if winbindd is started on beabourg user solarz can not log into \\beabourg\private - i am missed something about group access control in valid users?

(in nsswitch,conf there is nothing about winbind).