[Samba] Windows XP local services not starting automatically after joining samba domain

[Data Control Systems - Mike Elkevizth]

Hi,
I am trying to setup a Samba PDC with Windows XP Pro Clients. I currently
run a Samba 2.2 PDC and am trying to change over to a Samba 3.0.5 PDC with
an LDAP backend. I can join the domain fine, but from there things are
getting rough. The Samba server is running on a Fedora Core 2 box with all
the current updates and all my clients are XP Pro. As soon as I logon (with
any account), I get can't find server copy of your roaming profile. This
turns out to be because the Workstation, Server, DHCP Client, Computer
Browser, and a few other services that should load at startup aren't running
when I logon. One weird thing is that the logon script from the netlogon
share still runs but all the drive mappings it is supposed to create fail
because the services aren't running. Another thing is that it affects my
local account also, because the services aren't running, but as soon as I
unjoin the domain or rejoin the old 2.2 domain things go back to normal and
the services start working again. Also, if after the computer is running and
I logon with a user, start the services, logout (not restart) and then I can
logon with any accounts and everything works fine. Any ideas on what could
be wrong in my setup would be greatly appreciated as I have been pulling my
hair out for a while on this one. I am also having some odd errors from User
Manager for Domains which I can live with, but maybe they are related. The
PDC is also running a DHCP server and DNS server so maybe something there is
wrong. Here is my smb.conf file and my IP info from my test client.

Thanks,

Mike Elkevizth

*****smb.conf

[global]
 # Basic settings

 workgroup = dcs
 netbios name = dcs004
 server string = Hartville Backup Server
 security = user
 map acl inherit = yes

 # Network settings

 time server = yes
 wins support = yes
 name resolve order = wins bcast hosts
 smb ports = 139 445
 hosts allow = 192.168.5. 192.168.6. 192.168.7. 127.

 # Domain control options

 os level = 99
 local master = yes
 preferred master = yes
 domain master = yes
 domain logons = yes
 logon script = %U.bat
 logon path = \\%L\profiles

 # Password change and create options for domain control

 unix password sync = yes
 lanman auth = no
 passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new
password*" %n\n"
 encrypt passwords = yes
 passwd program = /usr/sbin/smbldap-passwd -u %u
 add machine script = /usr/sbin/smbldap-useradd -w '%u'
 add user script = /usr/sbin/smbldap-useradd -a -m '%u'
 delete user script = /usr/sbin/smbldap-userdel '%u'
 add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g'
 delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g'
 set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
 add group script = /usr/sbin/smbldap-groupadd -p '%g'
 delete group script = /usr/sbin/smbldap-groupdel '%g'
 shutdown script = /var/lib/samba/scripts/shutdown.sh
 abort shutdown script = /sbin/shutdown -c

 # LDAP settings

 passdb backend = ldapsam:ldap://dcs004.dcs
 idmap backend = ldap://dcs004.dcs
 ldap ssl = start_tls
 ldap admin dn = cn=sambauser,ou=DSA,dc=ldap,dc=dcs
 ldap suffix = dc=ldap,dc=dcs
 ldap machine suffix = ou=People
 ldap user suffix = ou=People
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap replication sleep = 1000
 idmap uid = 10000-20000
 idmap gid = 10000-20000

 # Log settings
 log level = 3
 log file = /var/log/samba/log.%m
 max log size = 50
 syslog = 0

[profiles]
 path = /home/%U/.winprof
 read only = no
 browseable = no
 profile acls = yes
 create mask = 0771
 directory mask = 2770
 force directory mode = 2770
 map system = yes
 map hidden = yes
 hide unreadable = yes

[My Documents]
 path = /home/%U/Documents
 read only = no
 browseable = no
 create mask = 0771
 directory mask = 2770
 force directory mode = 2770
 map system = yes
 map hidden = yes

[netlogon]
 path = /home/netlogon
 comment = Network Logon Service
 guest ok = yes
 locking = no
 read only = yes
 browseable = no
 write list = administrator


******IP info from client



Windows IP Configuration



        Host Name . . . . . . . . . . . . : mae003

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Hybrid

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . : dcs

        Description . . . . . . . . . . . : Accton EN2242 Series MiniPCI
Fast Ethernet Adapter

        Physical Address. . . . . . . . . : 00-D0-59-5C-B6-C3

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.5.254

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        Default Gateway . . . . . . . . . : 192.168.5.1

        DHCP Server . . . . . . . . . . . : 192.168.5.11

        DNS Servers . . . . . . . . . . . : 192.168.5.11

        Primary WINS Server . . . . . . . : 192.168.5.11

        Lease Obtained. . . . . . . . . . : Monday, August 16, 2004 5:24:21
PM

        Lease Expires . . . . . . . . . . : Tuesday, August 17, 2004 5:24:21
PM