samba - Jul 2003 - Samba3 PDC with LDAP

Dear All,
I still cannot get Samba3 (beta3) to work as PDC with
LDAP backend. I still encounter the problem of having
to join an XP workstation two times in succession
before the join is successful. This does not happen on
Samba2.2.8a. For both Samba 2.2.8a and samba3 beta i
have workstation accounts added directly to ldap (via
add-machine-script) without adding a corresponding
entry in /etc/passwd. Same script used (except that
the LDAP schemas are different).

I have read the Samba docs a few times (for Samba3)
but I still cannot figure out why the following
(extracted from the samba log) exists:

[2003/07/18 11:47:42, 2]
lib/smbldap.c:smbldap_search_suffix(1056)
  smbldap_search_suffix: searching
for:[(&(uid=vaio$)(objectclass=sambaSamAccount))]
[2003/07/18 11:47:42, 0]
passdb/pdb_ldap.c:ldapsam_add_sam_account(1458)
  User 'vaio$' already in the base, with samba
attributes
[2003/07/18 11:47:42, 0]
rpc_server/srv_samr_nt.c:_api_samr_create_user(2326)
  could not add user/computer vaio$ to passdb.  Check
permissions?

(This happens when the XP joined the domain the first
time,which failed).

May I ask for anyone who has successfully used Samba3
beta as PDC with Openldap to help? I'd be very much
appreciated also if someone can point me to documents
somewhere which I can read further on this.

Thanks in advance!
Chee Wai

__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

> [2003/07/18 11:47:42, 0]
> rpc_server/srv_samr_nt.c:_api_samr_create_user(2326)
>   could not add user/computer vaio$ to passdb.  Check
> permissions?
Two questions (though I am quite sure that you have done both):
1. Did you specify the Admin-DN correctly?
2. Did you set the correct password for the LDAP-Admin?

Thilo

Hi,

Do you mean ldap admin dn? Yes. Password of ldap admin
dn added to secrets.tdb via smbpasswd -w.

The thing which I simply cannot understand is that the
first join failed, *but* the ldap entry of the
workstation was added successfully. (An "id" command
on vaio$ will show its entry from ldap, which I
believe also mean that my nssldap/pamldap is working)
A second join immediately following the first would
just succeed.

Thanks
Chee Wai

--- Thilo Rößler <el-nino@gmx.li> wrote:
> 
> > [2003/07/18 11:47:42, 0]
> >
> rpc_server/srv_samr_nt.c:_api_samr_create_user(2326)
> >   could not add user/computer vaio$ to passdb. 
> Check
> > permissions? 
> 
> Two questions (though I am quite sure that you have
> done both):
> 1. Did you specify the Admin-DN correctly?
> 2. Did you set the correct password for the
> LDAP-Admin?
> 
> Thilo

__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com