[Samba] Samba 3rc4 PDC - Trouble joining W2k to domain (no mapping?)

[Chris Hilts]

I am running Samba 3rc4 as a PDC.  When trying to join my Windows 2000
workstation to the domain, I get the following error (on the win2k box):

No mapping between account names and security IDs was done.

I've searched Google, the archives of this list, the docs and a Ouija
board for answers, with no success.. Can anyone provide a pointer to what
it is I'm missing?  Thanks in advance.   Below is my smb.conf.

# Global parameters
[global]
        netbios name = CACTUSPATCH
        comment = Test PDC for domain TESTAREA
        workgroup = TESTAREA

        passdb backend = mysql:mysql_id,guest

        # MySQL specific parameters
        mysql_id:mysql user = root
        mysql_id:mysql password = um..no
        mysql_id:mysql database = auth

        # Required for PDC operation
        security = user
        os level = 33
        preferred master = yes
        domain master = yes
        local master = yes
        encrypt passwords = yes
        domain logons = yes
        log level = 5

[netlogon]
path = /storage/netlogon
read only = yes
write list = ntadmin

[profiles]
path = /storage/profiles
read only = no
create mask = 0600
directory mask = 0700

[homes]
  guest ok = no
  read only = no