[Samba] Need help with winbind

[Jan van Rensburg]

Hi,
I've been trying for some time now to get winbind working on Solaris, 
without success. I'd really appreciate some help. I've tried various 
ways to get this working, but I'll only describe one method that's 
recommended been recommended on the list, but still fails for me. I've 
followed the winbind documents to the letter. I think the problem might 
be with permissions on the w2k server, but I'm not sure.

Setup: Solaris 8, Win2k ADS DC, samba 2.2.3a compiled with gcc 2.95.3 
and also tested with gcc 3.0.3.

I create an account on the ADS server (GA - 10.5.1.3) for the Solaris 
machine (SRVSUN - 10.5.3.6), and check the "Allow pre win 2000 
computers" box. I delete everything in /opt/samba/private.

I'm 100% sure that name resolution works fine.

Now on the sun server I try to join the domain:
$ smbpasswd -j us-epiuse-com
fetch_domain_sid: machine GA rejected the tconX on the IPC$ share. Error 
was : NT_STATUS_ACCESS_DENIED.
Failed to get domain SID. Unable to join domain US-EPIUSE-COM.

So why does this happen? According to everyone else this is supposed to 
work. I've tried enabling the guest account on the w2k server, but it 
makes no difference.

So, on to plan 2. I will give it the account of the w2k admin:
$ smbpasswd -j us-epiuse-com -r GA -U w2kadmin
Password:
Joined domain US-EPIUSE-COM.

And all looks well. However when I start nmbd and then winbindd I get 
the following error in the winbind log: "Could not connect to a dc for 
domain US-EPIUSE-COM".

I'd really appreciate any help.

Regards,
Jan van Rensburg