credentials failed?

[Rob King]

I'm having a bugger of a time trying to get domain logons working.
I'm using samba-tng-alpha.2.5.3 on debian 2.1r4 (linux 2.2.14 kernel).
I'm using SunDS for LDAP, and nt4, service pack 4. 

I set up a domain, and can login just fine. After I log in, when
the workstation tries to mount its profiles and such, I get this
error in the log file:

rpc_api_pipe_req: data_end: 72 and offset 66 wrong
cli_nt_setup_creds: request challenge failed
domain_client_validate: credentials failed (\\.)
SMB LM/NT Password did not match!      
Rejecting user 'rmk': authentication failed
32 bit error packet at line 493 cmd=115 (SMBsesssetupX) eclass=c000006d [Error: Unknown error (109,49152)]
error string = Address already in use
Transaction 1 of length 174            
switch message SMBnegprot (pid 16087)

I'm stymied here. If there's any more information I can provide for
background on this, let me know.

Here is the machine account LDAP entry:

dn: uid=slartibartfast$,ou=People,ou=pvd,o=ams.org
objectclass: sambaaccount
objectclass: top
creatorsname: cn=admin,o=ams.org
createtimestamp: 20000425184104Z
subschemasubentry: cn=schema
uid: slartibartfast$
rid: 10000
ntuid: slartibartfast$
lmpassword: [deletia]
ntpassword: [deletia]
pwdlastset: 3911BBC9
acctflags: [W          ]
gidnumber: 120
grouprid: 5c9
pwdcanchange: 00000000
pwdmustchange: 00000000
logontime: 00000000
logofftime: 00000000
kickofftime: 00000000
modifytimestamp: 20000511193743Z
modifiersname: cn=admin,o=ams.org
uidnumber: 11036


And here's my account entry:

dn: uid=rmk,ou=People,ou=pvd,o=ams.org
creatorsname: cn=admin,o=ams.org
createtimestamp: 19990928222837Z
subschemasubentry: cn=schema
ctcaldefaultreminder: 0:10
ctcaloperatingprefs: 0:255:0:0:0:0:0:1440:0:1440:0:0:1440:0:1440:0:0:1440:0:14
 40:0:0:1440:0:1440:0:0:1440:0:1440:0:0:1440:0:1440:0:0:1440:0:1440
ctcalflags: 0
ctcaldefaulttaskreminder: 0:0
ctcalrefreshprefs: 1:60
ctcaldefaultnotereminder: 0:0
ctcallanguageid: 0
ctcalpasswordrequired: 1
ctcalnotifmechanism: 1
title: sysadmin
ctcalsysopcanwritepassword: 1
ctcaldisplayprefs: 4:480:1080:1:30:190:2
ctcaltimezone: 29
authserviceprotocol: Framed-User
framedcompression: Van-Jacobson-TCP-IP
framedprotocol: PPP
framedmtu: 1500
ipnetmasknumber: 255.255.240.0
framedipaddress: 130.44.1.250
ctcalxitemid: 10000:00731
objectclass: account
objectclass: ctcaluser
objectclass: inetorgperson
objectclass: organizationalperson
objectclass: person
objectclass: posixaccount
objectclass: remoteuser
objectclass: sambaaccount
objectclass: top
ipxnetworknumber: 25.149.190.173
framedrouting: Broadcast-Listen
cn: Rob King
sn: King
givenname: Robert
uid: rmk
uidnumber: 1036
gidnumber: 120
homedirectory: /usr/users/opn/rmk
loginshell: /usr/local/bin/tcsh
mail: rmk at ams.org
telephonenumber: x4097
gecos: Rob King
radiusauthfailedaccess: 4
grpcheckinfo: uid
grpcheckinfo: userpassword
modifytimestamp: 20000511210511Z
modifiersname: cn=admin,o=ams.org
userpassword: {crypt}[deletia]
ntpassword: deletia
ntuid: rmk
rid: 1036
lmpassword: deletia

-- 
Rob King         The next day is never as good as the day before.
UNIX Sys Admin
rmk at ams.org                                                 -- Publius Syrus