samba - Sep 2004 - Can join domain, can't login -- LDAP PDC

I am trying to set up Samba 2.2.9 on a SuSE 9.1 box as an LDAP PDC
whose only job will be authentication.  Our LDAP server is on a
separate box.  I can join the domain just fine, but when I try to
login via Windows, I get the following error:

"The system cannot log you on to this domain because the system's
computer account in its primary domain is missing or the password on
that account is incorrect."

I suspected that neither of these were the case, as I created the
account with idealx's smbldap-tools, so I checked through the slapd
logs after a login attempt and, strangely, Samba was never even
querying the LDAP server.  I checked the Samba logs, and here's what I
get whenever I try to login:

[2004/09/28 16:10:23, 0] lib/fault.c:fault_report(38)
  ==============================================================[2004/09/28
16:10:23, 0] lib/fault.c:fault_report(39)
  INTERNAL ERROR: Signal 11 in pid 18021 (2.2.9)
  Please read the file BUGS.txt in the distribution
[2004/09/28 16:10:23, 0] lib/fault.c:fault_report(41)
  ==============================================================[2004/09/28
16:10:23, 0] lib/util.c:smb_panic(1094)
  PANIC: internal error

This is with log level = 10.  I've gone through all of the tests in
DIAGNOSIS.txt and all of them work.  I noticed this section in the
BUGS.txt:

"If you get a "INTERNAL ERROR" message in your log files it means
that
Samba got an unexpected signal while running. It is probably a
segmentation fault and almost certainly means a bug in Samba (unless
you have faulty hardware or system software)"

Yay.  There is no core, as the documentation suggests there might not
be.

Does anyone have any ideas?  Thanks.

Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University
402.465.7549

Chris St. Pierre wrote:
> "The system cannot log you on to this domain because the system's
> computer account in its primary domain is missing or the password on
> that account is incorrect."
> 
> I suspected that neither of these were the case, as I created the
> account with idealx's smbldap-tools, so I checked through the slapd
> logs after a login attempt and, strangely, Samba was never even
> querying the LDAP server.  I checked the Samba logs, and here's what I
> get whenever I try to login:
This is the usual simptom of nscd at work. It caches negative and 
positive answers and when Samba makes NSS requests it get it from nscd 
which doesn't bother to go into LDAP.

I would suggest to turn nscd off untill you have all your machines and 
users in LDAP.

Igor