samba - Aug 2003 - WinXP Pro domain join OK -- add domain users to local groups NOT

Good day everyone and sorry to add to the traffic with one more 
(possibly stupid) question.

I have the following problem which I could reproduce with both Samba 
2.2.7 and 2.2.8 and with about 5 clients. I install WindowxXP Pro 
(w/SP1), I modify "RequireSignOrSeal=0", I join the domain (using a 
'root' account that is present in smbpasswd and whose password I know) 
-- and it's all okay: it says "Welcome to the domain!".
I check the Linux part: it's all okay, the machine$ account is in place, 
in both smbpasswd and passwd.

When I try to logon with a domain user it sometimes works, sometimes not.
When I logon as local admin and try to add a domain user to a local 
group, it first asks the name and password of a user with enumeration 
rights in the domain -- I feed it, it displays the user list but when I 
pick a domain user and click OK it hangs for about 10 to 20 seconds and 
it says something like "I could not add that user because the domain did 
not give me enough information about it".

If anyone needs any kind of extra info -- just let me know. In debug 
level 3 logs all seems normal ...
If you have any idea, do please let me know ... I'm supposed to make 
this work at work ... and it worked just fine for '9x, NT4 and 2k ... 
but XP seems to be a new kind of magic :D

Kind Regards,
Radu - Eosif Mihailescu

-- 
@Dexter <csdexter@home-27021.b.astral.ro> ICQ: 27762040 GSM: +40 (721)
294400 JID: csdexter@jabber.b.relad.ro