[Samba] Authentication Failure in member server

[Diego Alencar Alves de Lima]

Just adding some more information:

I am currently unable to join any new machines to the domain. Whenever I tr=
y=20
to join the domain I get this message on the clients:

$ sudo net join -U root
Password:
Creation of workstation account failed
Unable to join domain PRODESAN.COM.BR.

On the PDC side I get this:

[2007/05/30 17:11:15, 2] lib/smbldap.c:smbldap_open_connection(788)
  smbldap_open_connection: connection opened
[2007/05/30 17:11:15, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
  init_sam_from_ldap: Entry found for user: root
[2007/05/30 17:11:15, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
  init_group_from_ldap: Entry found for group: 513
[2007/05/30 17:11:15, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [root] -> [root] -> [root]=
=20
succeeded
[2007/05/30 17:11:15, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
  init_sam_from_ldap: Entry found for user: root
[2007/05/30 17:11:15, 2] smbd/reply.c:reply_tcon_and_X(711)
  Serving IPC$ as a Dfs root

On my LDAP backend I have this entry:

dn: sambaDomainName=3DPRODESAN.COM.BR,dc=3Dprodesan,dc=3Dcom,dc=3Dbr
sambaAlgorithmicRidBase: 1000
sambaNextUserRid: 41000
sambaNextGroupRid: 41001
objectClass: sambaDomain
objectClass: sambaUnixIdPool
sambaSID: S-1-5-21-3756370324-611414431-635963119
sambaDomainName: prodesan.com.br
gidNumber: 1055
uidNumber: 1454

The sambaSID is the same that was before the migration. Do I need to set th=
is=20
SID somewhere else?

--=20
Diego Alencar Alves de Lima
Departamento de Inform=C3=A1tica - DINF
www.prodesan.com.br

--=20
Esta mensagem foi verificada pelo sistema de antiv=EDrus e
 acredita-se estar livre de perigo.