search for: smb_com_transaction

...access. This problem has not arisen for the majority of users that have changed their NT passwords. We do have multiple BDC's, but the issue does not seem to be that the password has not been updated on the PDC yet. When I watch (with tcpdump with the samba patches) everything looks OK until SMB_COM_TRANSACTION (SMB command 0x25). In the data of the request I see the userid and *SMBSERVER. For a user that doesn't experience this problem *SMBSERVER is replaced with the Solaris box's name. Can anyone give me an idea of what else I should look at to figure this problem out? Thanks Joe