p.s. even if I could get it to authenticate SMB from the current 5.3 box I'd be happy.
If I have to go the directory services route I can only say that I hope it has improved a lot since the last time I installed it 18 months ago - though that was 389-ds ...