samba - Jan 2006 - NT 4 workstation joining Samba domain

Samba 3.0.21b with LDAP backend

The transfer to the Sanba hosted domain appears to work, ie success message,
but I can't log on to a domain account from that workstation, complains
about missing machine account or incorrect password.

Only NT4 workstations seem to be a problem, Win2k and XP are Ok.
NT4 is maximally patched, updated and etc - no registry hacks however.

I checked the LDAP database - a machine account is being created.

Where do I start looking for the cause of the problem?

On Mon, 2006-01-30 at 18:25 +1100, taso wrote:
> Samba 3.0.21b with LDAP backend
> 
> The transfer to the Sanba hosted domain appears to work, ie success
message,
> but I can't log on to a domain account from that workstation, complains
> about missing machine account or incorrect password.
> 
> Only NT4 workstations seem to be a problem, Win2k and XP are Ok.
> NT4 is maximally patched, updated and etc - no registry hacks however.
> 
> I checked the LDAP database - a machine account is being created.
> 
> Where do I start looking for the cause of the problem?
---
if the number of machines is small, just join it to the domain again.

Craig

taso wrote:
> Samba 3.0.21b with LDAP backend
> 
> The transfer to the Sanba hosted domain appears to work, ie success 
> message,
> but I can't log on to a domain account from that workstation, complains
> about missing machine account or incorrect password.
> 
> Only NT4 workstations seem to be a problem, Win2k and XP are Ok.
> NT4 is maximally patched, updated and etc - no registry hacks however.
> 
> I checked the LDAP database - a machine account is being created.
> 

I don't know if this counts as an official bug, but further investigation
shows that the machine account created when an NT machine joins the domain
is disabled, ie sambaAcctFlags = DW, whereas when a win2k or xp joins the domain
sambaAcctFlags = W.