samba - Dec 2003 - net rpc vampire problems

Hi all.

I'm trying to migrate our NT4 domain to Samba-3.0.1-rc3.

My smb.conf:

[global]
    netbios name = vp
    workgroup = NUSAUS
    server string = Samba Server %v
    bind interfaces only = true
#    interfaces = 192.168.0.1/24
    interfaces = 10.146.1.100/24
    passdb backend = tdbsam

    log level = 5
    log file = /var/log/samba3/log.%m
    max log size = 50
    name resolve order = wins lmhosts bcast
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    printcap name = cups
    add user script = /usr/sbin/useradd -s /bin/false '%u'
    delete user script = /usr/sbin/userdel '%s'
    add group script = /usr/sbin/groupadd %g && getent group
'%g'|awk
-F: '{print $3}'
    delete group script = /usr/sbin/groupdel '%g'
    add user to group script = /usr/bin/gpasswd -a '%u' '%g'
    delete user from group script = /usr/bin/gpasswd -d '%u'
'%g'
    set primary group script = /usr/sbin/usermod -g '%g' '%u'
    domain logons = Yes
    os level = 33
    preferred master = Yes
    domain master = No
    wins support = Yes
    printer admin = @adm
    printing = cups
    preserve case = No
    logon drive     logon home     logon script = drives.bat

    [netlogon]
    comment = Network Logon Service

I can join the domain ( as long as I specify the IP address with the -I 
flag ).
When I run the 'vampire' command, I get the following errors for each 
machine / user:

Creating account: DKASAK$
Could not create posix account info for 'DKASAK$'
Creating account: dkasak
[2003/12/15 13:44:00, 0] utils/net_rpc_samsync.c:fetch_account_info(497)
  Could not find unix group 4294967295 for user dkasak (group 
SID=S-1-5-21-667748849-896033114-1233803906-513)

Each user already has an account set up on the computer ( I'm already 
running a mail server ), but the machine trust account creation 
shouldn't be failing.
The users are imported into samba, and I can see them with 'pdbedit -L',
however when I move the samba server & a test PC off onto another 
network ( and set 'Domain Master' to 'Yes' and change the
'interfaces'
line ) and try to log on to the domain, I get an error that the machine 
trust account doesn't exist, or the password for the account is incorrect.

The trust account doesn't seem to be created at all. Any idea why?

-- 
Daniel Kasak
IT Developer
NUS Consulting Group
Level 5, 77 Pacific Highway
North Sydney, NSW, Australia 2060
T: (+61) 2 9922-7676 / F: (+61) 2 9922 7989
email: dkasak@nusconsulting.com.au
website: http://www.nusconsulting.com.au

Looks like you don;t have group maps done

So execute followinf script for group mapping then do vampire...

#!/bin/bash
#### Keep this as a shell script for future re-use
 

 

# First assign well known groups
net groupmap modify ntgroup="Account Operators" unixgroup=root
net groupmap modify ntgroup="Administrators" unixgroup=root
net groupmap modify ntgroup="Backup Operators" unixgroup=bin
net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmins
net groupmap modify ntgroup="Domain Guests" unixgroup=nobody
net groupmap modify ntgroup="Domain Users" unixgroup=users
net groupmap modify ntgroup="Guests" unixgroup=nobody
net groupmap modify ntgroup="Power Users" unixgroup=sys
net groupmap modify ntgroup="Print Operators" unixgroup=lp
net groupmap modify ntgroup="Replicators" unixgroup=daemon
net groupmap modify ntgroup="System Operators" unixgroup=sys
net groupmap modify ntgroup="Users" unixgroup=users