[Samba] samba3+openldap:Problem during the LDAP search

[Adam Tauno Williams]

> But now another problem happened: when I tried to join a Winxp to the
> domain, after I enter the root account and password, a popup said "logon
> failure:unknown user name or bad password".
> I can see root account using slapcat. 

Why are you using slapcat to see if there is a root account in the Dit?
This seems like an alarm-bell that you need to slow down and learn a
little bit more about LDAP and the LDAP tools before proceeding.

> I used smbldap-passwd to change the
> root's password.
> If I change the passdb backend to tdbsam, I can join the domain.
> Any idea?

Everything with the tdbsam is pretty much automated for you;  to work
with an LDAP SAM you need more "glue" and to get that to work you need a
working understanding of the different layers.

Do you have an add user script setup?

-- 
Adam Tauno Williams, Network & Systems Administrator
Consultant - http://www.whitemiceconsulting.com
Developer - http://www.opengroupware.org