tng as bdc, what have i forgotten?

[Tim Strobell aka Griffy]

howdy samba gurus,

i've just slurped down SAMBA_TNG from cvs, and have it happily compiled and
installed. i'm trying to add the samba box as a bdc (SAMBABDC) to our existing
domain (MATHNT, pdc is NTSERVER).

when i try to create the trust acct for the samba box on the nt server,
it fails miserably. i'm following Lars Kneschke's TNG info... (hi Lars!)

[MATHNT\griffy at NTSERVER]$ createuser SAMBABDC$ -s -j MATHNT
createuser SAMBABDC$ -s -j MATHNT
SAM Create Domain User
Domain: MATHNT Name: sambabdc$ ACB: [S          ]
Create Domain User: OK
Join SAMBABDC to Domain MATHNT
LSA_OPENSECRET: NT_STATUS_ACCESS_DENIED
LSA_OPENSECRET: NT_STATUS_ACCESS_DENIED
Set $MACHINE.ACC: FAILED

what have i forgotten to do? :-)
i'd normally search through the archives before posting, but...

many thanks,

tim

--
Tim "Griffy" Strobell, griffy at math.umd.edu, (301) 405-8175
Assistant Sysadmin, Server Janitor, and Customer Service Associate
Department of Mathematics, University of Maryland at College Park