samba - Jul 2004 - samba PDC 3.0.4 - windows xp

I have setup samba as a pdc. I have been successful in getting xp to join the
domain but the machine account zebra(xp machine) is added in smbpasswd with all
XXX's and the xp machines says the trust relationship between this
workstation and the primary domain controller failed.

I have included my smb.conf :

[global]
   log file = /usr/local/samba/var/log.%m
   passwd chat timeout = 10
   ldap ssl = no
   add group script = /usr/sbin/groupadd -r %g
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/bin/gpasswd -a %u %g
   logon drive = H:
   delete user from group script = /usr/bin/gpasswd -d %u %g
   domain master = Yes
   encrypt passwords = yes

   dns proxy = No
   netbios name = dc1
   server string = Koster PDC Test

   logon script = netlogon.bat
   default = homes
   workgroup = ad.bigfive.com
   os level = 62
   add user script = /usr/sbin/useradd -n -g users -d /dev/null -s /bin/false -m
%u


   add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null
-s /bin/false -M %u

   delete user script = /usr/sbin/userdel %u
   max log size = 50
   domain logons = Yes
   logon path 

[netlogon]

    path = /usr/local/samba/lib/netlogon

    writable = no

    browsable = no



[profiles]

    ; you might wish to use a different directory for your

    ; Windows NT/2000/XP roaming profiles

    path = /home/samba-ntprof

    browsable = no

    writable = yes

    create mask = 0600

    directory mask = 0700

[homes]

    read only = no

    browsable = no

    guest ok = no

    map archive = yes

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Zeidlers wrote:

I think this line is your problem.

|    add machine script = /usr/sbin/adduser -n -g machines -c Machine -d
/dev/null -s /bin/false -M %u

This line probably creates a new user without a password.

I suggest you use smbpasswd to create the machine account record
instead. Something like:

add machine script = /usr/bin/smbpasswdb -m -a %u

- -m is for createing machine accounts and should also generate an
appropriate password.

- --

- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings@hotmail.com  AIM: WyteLi0n  ICQ: 123291844 	|
|---------------------------------------------------------------|
| Y!: j_c_llings               Jabber: jcllings@njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA6IwK57L0B7uXm9oRAoW9AJ4jXYydznvmXKsuaDekHCzI5f+adQCfQAUh
F6o+C+NubjYPzqeX8hU/qXg=Dyo1
-----END PGP SIGNATURE-----