samba - Mar 2002 - W2K Sp2 in NT4 domain and roaming profiles on samba 2.2.3a

Hello samba-insiders,

we have a WinNT 4.0 SP5 PDC and our samba 2.2.3a is member of the domain.
The roaming profiles of our clients stored on the samba 2.2.3a server.
All seams to be perfect but only clients with W2K SP2 cannot use there
roaming profiles.

---> "Access Denyed" is the W2K errro message.

But if the same user loggs on on a client machine with W2K SP1 all things
are ok.

In the log.smb file I found the following error message:
[2002/03/05 11:34:42, 0] smbd/posix_acls.c:create_canon_ace_lists(762)
create_canon_ace_lists: unable to map SID
S-1-5-21-1482442952-1152601475-1307212239-1097 to uid or gid.

This is the smb.conf:
# Samba config file created using SWAT
# Date: 2002/02/25 20:41:29

# Global parameters
[global]
        workgroup = ATACAMA
        netbios name = ATACAMA02
        security = DOMAIN
        encrypt passwords = Yes
        password server = ATACAMA01
        username map = /usr/local/samba/lib/usermap.txt
        deadtime = 15
        character set = ISO8859-1
        wins server = 192.168.1.1
        invalid users = root admin bin
        create mask = 0770
        directory mask = 0770
        mangled names = No

[profiles]
        path = /usr/z_atacama_data/profiles
        read only = No
        browseable = No

[LW1]
        comment = allgemeine Daten
        path = /usr/z_atacama_data/lw1
        valid users = @domaene
        read only = No

Is there a solution?
I'm only a stupid beginner using samba.

On Tue, 5 Mar 2002, Rene Lenga wrote:
> But if the same user loggs on on a client machine with W2K SP1 all things
> are ok.
> 
> In the log.smb file I found the following error message:
> [2002/03/05 11:34:42, 0] smbd/posix_acls.c:create_canon_ace_lists(762)
> create_canon_ace_lists: unable to map SID
> S-1-5-21-1482442952-1152601475-1307212239-1097 to uid or gid.
> 
> This is the smb.conf:
> # Samba config file created using SWAT
> # Date: 2002/02/25 20:41:29
> 
> # Global parameters
> [global]
>         workgroup = ATACAMA
>         netbios name = ATACAMA02
>         security = DOMAIN
>         encrypt passwords = Yes
>         password server = ATACAMA01
>         username map = /usr/local/samba/lib/usermap.txt
>         deadtime = 15
>         character set = ISO8859-1
>         wins server = 192.168.1.1
>         invalid users = root admin bin
>         create mask = 0770
>         directory mask = 0770
>         mangled names = No
> 
> [profiles]
>         path = /usr/z_atacama_data/profiles
>         read only = No
>         browseable = No
See docs/README.Win2kSP2





jerry
 ---------------------------------------------------------------------
 Hewlett-Packard                                     http://www.hp.com
 SAMBA Team                                       http://www.samba.org
 --                                            http://www.plainjoe.org
 "Sam's Teach Yourself Samba in 24 Hours" 2ed.      ISBN
0-672-32269-2
 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--

A simple question about roaming profiles using samba 2.2.2 as a domain
controller in a network with mixed clients (Win9x/ME/NT4/2000/XP):

(1) Is it possible to enable the roaming profiles for some users while
disable it for others? How is it done?
(2) Is there a way to control that behaviour from samba?

Thanks,

Oscar.