Problem with machine accounts

[Don Brearley]

Hello,

I apologize for re-posting this error.. but I did not get any solutions
from the last time I posted it. 

I am currently experiencing a bizzare problem with Windows 2000 PC's
on my LAN connecting to a samba (version 2.2.8a) PDC. When people boot
up their PC's, and attempt to authenticate to the domain, a message comes
back:

"The system cannot log you on to this domain because the system's computer
account in its primary domain is missing or the password on that account is
incorrect"

I am forced to unjoin the domain, reboot, and then rejoin the domain.  Several
PC's again do not authenticate only a few hours after I rejoin the domain. 
It's as though the machine account's password is being changed client side, and
then not being updated server-side. 

Even when the domain authentication fails, I can still login to the PC as
the local administrator and connect to a share on the PDC with no problem.

I have been reading the mailing lists and can find almost nothing dealing
with this particular problem. I already have a nobody account, and I have
encrypted passwords = yes in smb.conf. And about 95% of the machines that 
use the PDC, still work. I have also checked the "signorseal" stuff and everything
checks out.

If anyone could give me a hand with this one, I'd appreciate it very much.

Thanks!

- Don Brearley

  HCC Computer Services
  http://www.hibbing.edu


Here is a sample from the log file:

[2003/09/22 11:03:17, 4] libsmb/credentials.c:cred_create(91)
  cred_create
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(93)
   sess_key : EDCFAA5C1186C253
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(94)
   stor_cred: 6A4FF25039CE7787
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(95)
   timestamp: 0
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(96)
   timecred : 6A4FF25039CE7787
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(97)
   calc_cred: A1273E3DC1386420
[2003/09/22 11:03:17, 4] libsmb/credentials.c:cred_assert(122)
  cred_assert
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_assert(124)
   challenge : 6F9CC535DA25515B
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_assert(125)
   calculated: A1273E3DC1386420
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_assert(134)
  credentials check wrong
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_debug(60)
  000000 net_io_r_auth_2 
[2003/09/22 11:03:17, 6] rpc_parse/parse_prs.c:prs_debug(60)
      000000 smb_io_chal 
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(675)
          0000 data: 34 f3 bf bf 39 a7 1e 28 
[2003/09/22 11:03:17, 6] rpc_parse/parse_prs.c:prs_debug(60)
      000008 net_io_neg_flags 
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(588)
          0008 neg_flags: 000001ff
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_ntstatus(618)
      000c status: NT_STATUS_ACCESS_DENIED