Hi, I've got a RH72 box called FILESERV acting as a PDC for a while now. It's been doing fine with Win2k clients. The version of the PDC Samba is 2.2.3a-1. I've now added a RH72/samba-2.2.1a-4 machine called GOA to the domain. I've set it to use FILESERV as the password server. On GOA I created a local linux user that's name matches the one in the Windows domain (peter). It does not seem to work: When I try to access the "juuri" share on GOA from a Win2k client, my authentication is not accepted. This error apperas in the PDC's logs: --<snip>-- [2002/07/17 14:53:23, 0] rpc_server/srv_netlog.c:api_net_sam_logon(206) api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. [2002/07/17 14:53:23, 0] rpc_server/srv_pipe.c:api_rpcTNP(1200) api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. --</snip>-- Nothing in GOA's logs. What might be wrong? I created a local account for root on GOA with smbpasswd -a and that seems to work fine. GOA's smb.conf: --<snip>-- [global] workgroup = WORKGROUP netbios name = GOA server string = Samba %v on (%L) security = DOMAIN password server = FILESERV encrypt passwords = Yes log file = /var/log/samba/log.%m max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No remote announce = 192.168.0.255 # hosts allow = 192.168.0. local master = no os level = 0 [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [juuri] path = / writeable = Yes --</snip>-- FILESERV's smb.conf: --<snip>-- [global] netbios name = FILESERV workgroup = WORKGROUP server string = Samba %v on (%L) printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = user ; act as a pdc domain logons = yes domain admin group = @admin ; NT profiles stored here logon path = \\%L\%U\winnt_profile ; Home Directory logon home = \\%L\%U logon drive = H: ; the script to execute from netlogon share dir logon script = %U.bat socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 65 local master = yes domain master = yes preferred master = yes wins support = no dns proxy = no encrypt passwords = yes add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u time server = yes --</snip>-- Regards, Peter