[Samba] _net_sam_logon: user LINUX.DOM\Administrator has user sid S-1-5-21-3745475611-740728939-4060410587-2988

[Dirk Hennrichs]

I want to set up a PDC for 250 Users with SuSE Linux 9.0 and Samba 3.0.4

But when I try to log in as Administrator I get the error message "A device
attached to the system is not functioning"

Log Error Message:
==================
[2004/06/16 08:10:03, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1397)
  failed to decode PDU
[2004/06/16 08:10:03, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/06/16 08:10:03, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(713)
  _net_sam_logon: user LINUX.DOM\Administrator has user sid
S-1-5-21-3745475611-740728939-4060410587-2988
   but group sid S-1-5-32-547.
  The conflicting domain portions are not supported for NETLOGON calls

net groupmap list:
==================
System Operators (S-1-5-32-549) -> root
Replicators (S-1-5-32-552) -> root
Guests (S-1-5-32-546) -> nobody
Power Users (S-1-5-32-547) -> users
Print Operators (S-1-5-32-550) -> root
Administrators (S-1-5-32-544) -> root
Account Operators (S-1-5-32-548) -> root
Domain Users (S-1-5-21-3745475611-740728939-4060410587-513) -> users
Domain Admins (S-1-5-21-3745475611-740728939-4060410587-512) -> root
Backup Operators (S-1-5-32-551) -> root
Users (S-1-5-32-545) -> users
Domain Guests (S-1-5-21-3745475611-740728939-4060410587-514) -> nobody

After that I deleted the file group_mapping.tdb, and login is OK. But that
cannot be the solution for this problem, because now, all nt-groups are not
matched to one unix-group, net groupmap list shows that all groups are
matched to unixgroup -1

My aim was to set up user root as the Administrator for the domain, and that
all users in unix-group root are "Domain Admins". So I set "username map =
/etc/user.map" in smb.conf, and user.map shows "root = Administrator". Now,
when I added a user with the User-Manager, I get the error message:
"Group-Name cannot be found !"

Can somebody help me with this ?

Greetings 
Dirk