Hi,
if I am not completely wrong, there is an apparmor conf file that needs to be changed...
Sorry, I do not have details atm...
I do not have "direct" access to my Zentyal boxes until weekend, so if it is urgent, try googleling AppArmor and kerberos (/ SaMBa)
Regards
Thomas