winbindd: error opening lsa handle on dc

[Paul Miller]

I just started working on getting winbindd to work and I'm receiving the
following error regarding not begining able to open lsa handle on dc:

(Samba 2.2.2-4 Debian package, latest Debian 'testing' distribution)

INFO: Debug class all level = 3   (pid 22131 from pid 22131)
Processing section "[homes]"
Processing section "[PRINTER$]"
Processing section "[netlogon]"
Processing section "[printers]"
Processing section "[profiles]"
adding IPC service IPC$
adding IPC service ADMIN$
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
added interface ip=192.168.100.1 bcast=192.168.100.255 nmask=255.255.255.0
added interface ip=192.168.10.1 bcast=192.168.10.255 nmask=255.255.255.0
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
added interface ip=192.168.100.1 bcast=192.168.100.255 nmask=255.255.255.0
added interface ip=192.168.10.1 bcast=192.168.10.255 nmask=255.255.255.0
establishing connections
server: dc=, pwdb_init=0, lsa_hnd=0
resolve_wins: Attempting wins lookup for name HOME<0x1c>
resolve_wins: WINS server == <127.0.0.1>
bind succeeded on port 0
Got a positive name query response from 127.0.0.1 ( 192.168.100.1 192.168.10.1 )
bind succeeded on port 0
resolve_wins: Attempting wins lookup for name PENGUIN<0x20>
resolve_wins: WINS server == <127.0.0.1>
bind succeeded on port 0
Got a positive name query response from 127.0.0.1 ( 192.168.100.1 192.168.10.1 )
Connecting to 192.168.100.1 at port 139
failed session setup
error opening lsa handle on dc PENGUIN

--- partial smb.conf ---

[global]

domain admin group = @smbusers

# identification
    netbios name = PENGUIN
    workgroup = HOME
    server string = Server

# domain (PDC)
    security = user
    os level = 250
    domain master = yes
    domain logons = yes
    local master = yes
    preferred master = yes
    logon drive = H:
    logon home = \\penguin\%u
    logon path = \\penguin\profiles\%u
    logon script = logon.bat

# winbind
    winbind separator = +
    winbind cache time = 10
    template shell = /bin/false
    template homedir = /home/%D/%u
    winbind uid = 10000-20000
    winbind gid = 10000-20000

# wins server
    wins support = yes
    name resolve order = wins lmhosts hosts bcast


... one thing I noticed about the previous winbindd posts was that they
all had 'security = domain' instead of user.  I don't think I need to
change this parameter because I want Samba to be the PDC.


Thank you,
-Paul