[Samba] Samba can't find unix accounts for user mapping

[Rainer Weber]

Hi,

we're using samba 3.0.24 on Solaris 10. Not long ago we've migrated from NIS to LDAP with
the Solaris integrated LDAP Server/Client. Now the user mapping doesn't work any more.
If I map the WINDOWS\Administrator account to the unix account admin (this is a local account
on the samba server) all works fine.

[2007/02/06 16:27:25, 3, effective(0, 0), real(0, 0)] smbd/sesssetup.c:reply_spnego_kerberos(207)
   Ticket name is [Administrator at WINDOWS.LOCAL]
[2007/02/06 16:27:25, 3, effective(0, 0), real(0, 0)] smbd/map_username.c:map_username(155)
   Mapped user WINDOWS\Administrator to admin

and I have access to the shares.

But if I use a LDAP account (WINDOWS\raiweber mapping to raiweber) I get this messages and no access
to the shares.

[2007/02/07 14:39:47, 3, effective(0, 0), real(0, 0)] smbd/sesssetup.c:reply_spnego_kerberos(207)
   Ticket name is [raiweber at WINDOWS.LOCAL]
[2007/02/07 14:39:47, 3, effective(0, 0), real(0, 0)] smbd/map_username.c:map_username(155)
   Mapped user WINDOWS\raiweber to raiweber
[2007/02/07 14:39:47, 1, effective(0, 0), real(0, 0)] smbd/sesssetup.c:reply_spnego_kerberos(310)
   Username raiweber is invalid on this system
[2007/02/07 14:39:47, 3, effective(0, 0), real(0, 0)] smbd/error.c:error_packet(146)
   error packet at smbd/sesssetup.c(315) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE

With NIS I had no problems using local and nis accounts.

Samba is a member server of a active directory domain.

Sorry for my english!

Thanks!!!

Rainer Weber

-- 
+--------------------------------------+
| Max Planck Institute for Mathematics |
|        System Administration         |
|                                      |
|  Vivatsgasse 7, 53111 Bonn, Germany  |
|  Tel       +49 (0)228-402-239        |
|  Fax       +49 (0)228-402-277        |
|  Email     raiweber at mpim-bonn.mpg.de |
+--------------------------------------+