samba - Apr 2004 - "A device attached to the system is not functioning"

Hello, 
 
Samba 3.0.2a, Debian linux, 2.6.x kernel, PDC server, WinXP clients.
 
When I try to log in on a XP client I get this message:
"A device attached to the system is not functioning"
 
I have tried google'ing for the error, but to no avail.
 
I have earlier created a user (anna), which can successfully log in from
my laptop. When I try to log in with anna on my workstation, I get the
error above.
 
If I type the wrong password, I get the normal password-error message,
so it seems like it's able to recognize the user and password.
If I log in with my local adminstrator, and open the share \\server
<file:///\\server> , I get a box for username and password. Typing anna,
and her password here gives me access to the samba shares, so also here
it looks like the user is functioning properly.
 
The log-file says something about schannel. I've tried having default
schannel settings, and also the ones I have in the smb.conf below, but
no change.
The log-file also talks about "conflicting domain portions", but
I'm not
sure what that means.
 
The samba_workstation.log file (debug level 1) says:
[2004/04/14 15:42:32, 0]
rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/04/14 15:42:32, 0]
rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/04/14 15:42:33, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(705)
  _net_sam_logon: user ISENGARD\anna has user sid
S-1-5-21-2641962930-4089608471-2571597100-3032
   but group sid S-1-5-21-481718812-4177942570-2152560252-513.
  The conflicting domain portions are not supported for NETLOGON calls
[2004/04/14 15:42:45, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(705)
  _net_sam_logon: user ISENGARD\anna has user sid
S-1-5-21-2641962930-4089608471-2571597100-3032
   but group sid S-1-5-21-481718812-4177942570-2152560252-513.
  The conflicting domain portions are not supported for NETLOGON calls
 
My smb.conf looks like this:
[global]
    # Server settings
    netbios name = server
    workgroup = ISENGARD
    server string = Testing PDC
    security = user
    encrypt passwords = yes
 
    # PDC settings
    domain logons = yes
    logon script = newlog.bat
    server schannel = yes
    server signing = no
 
    # Browser and WINS settings
    domain master = yes
    local master = yes
    preferred master = yes
    os level = 255
    wins support = yes
 
    # Other services
    time server = yes
 
    # Debugging and Logging
    log level = 1
    log file = /tmp/samba_%m.log
    max log size = 1000 #1MB
    debug timestamp = yes
    syslog = 1
 
[netlogon]
    path = /var/lib/samba/netlogon
    browseable = yes
    writable = no
 
[homes]
    comment = Home for %u
    writeable = yes
    browseable = no
 
An extract from the /etc/samba/smbpasswd, where Frodo is the NETBIOS
name of the workstation.
 
Frodo$:1013:B5A740276D3ECCA304D5DCD03D39A27A:A719EC89B9D1ADDBA2899135EF3
AB859:[W          ]:LCT-4064A7C0:
anna:1016:17355B639265D301AAD3B435B51404EE:80261BBFF0568C419F3B657EA8BBA
5C1:[U          ]:LCT-4062F759:

On Wed, Apr 14, 2004 at 04:01:56PM +0200, Frode Lillerud
wrote:
> Hello, 
>  
> Samba 3.0.2a, Debian linux, 2.6.x kernel, PDC server, WinXP clients.
>  
> When I try to log in on a XP client I get this message:
> "A device attached to the system is not functioning"
> [2004/04/14 15:42:33, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(705)
>   _net_sam_logon: user ISENGARD\anna has user sid
> S-1-5-21-2641962930-4089608471-2571597100-3032
>    but group sid S-1-5-21-481718812-4177942570-2152560252-513.
>   The conflicting domain portions are not supported for NETLOGON calls
> [2004/04/14 15:42:45, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(705)
>   _net_sam_logon: user ISENGARD\anna has user sid
> S-1-5-21-2641962930-4089608471-2571597100-3032
>    but group sid S-1-5-21-481718812-4177942570-2152560252-513.
>   The conflicting domain portions are not supported for NETLOGON calls
Remove your 'group_mapping.tdb' and re-add any mappings that were
intentional.

Andrew Bartlett