samba - Feb 2007 - Samba can't find unix accounts for user mapping

Hi,

we're using samba 3.0.24 on Solaris 10. Not long ago we've migrated from
NIS to LDAP with
the Solaris integrated LDAP Server/Client. Now the user mapping doesn't work
any more.
If I map the WINDOWS\Administrator account to the unix account admin (this is a
local account
on the samba server) all works fine.

[2007/02/06 16:27:25, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_spnego_kerberos(207)
   Ticket name is [Administrator@WINDOWS.LOCAL]
[2007/02/06 16:27:25, 3, effective(0, 0), real(0, 0)]
smbd/map_username.c:map_username(155)
   Mapped user WINDOWS\Administrator to admin

and I have access to the shares.

But if I use a LDAP account (WINDOWS\raiweber mapping to raiweber) I get this
messages and no access
to the shares.

[2007/02/07 14:39:47, 3, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_spnego_kerberos(207)
   Ticket name is [raiweber@WINDOWS.LOCAL]
[2007/02/07 14:39:47, 3, effective(0, 0), real(0, 0)]
smbd/map_username.c:map_username(155)
   Mapped user WINDOWS\raiweber to raiweber
[2007/02/07 14:39:47, 1, effective(0, 0), real(0, 0)]
smbd/sesssetup.c:reply_spnego_kerberos(310)
   Username raiweber is invalid on this system
[2007/02/07 14:39:47, 3, effective(0, 0), real(0, 0)]
smbd/error.c:error_packet(146)
   error packet at smbd/sesssetup.c(315) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE

With NIS I had no problems using local and nis accounts.

Samba is a member server of a active directory domain.

Sorry for my english!

Thanks!!!

Rainer Weber

-- 
+--------------------------------------+
| Max Planck Institute for Mathematics |
|        System Administration         |
|                                      |
|  Vivatsgasse 7, 53111 Bonn, Germany  |
|  Tel       +49 (0)228-402-239        |
|  Fax       +49 (0)228-402-277        |
|  Email     raiweber@mpim-bonn.mpg.de |
+--------------------------------------+