[Samba] 2.2.8pre1 domain logon failure

[richard]

redhat 8, 2.2.8pre1 set as pdc on subnet1, adduser script for 
machines (works ok)

bdc with security=domain, passwd server=* on subnet2 with xp-pro client.

1/
patched xp-pro joins domain, reboots login to domain ok, log out profile
uploaded to pdc, won't login again. reboot and usually will login.
tried remove from domain, remove machine accounts and recreate.tried new
samba-only users to eliminate profile probs etc no diff.

error on xp : domain controller uncontactable or no machine
account.(machine account exists, xp registry is modified)
error on samba pdc (sometimes): unable to unmarshall SAMR_Q_SET_USERINFO

2/
xp-pro client is "difficult" to join samba-domain. common errors:
"network connections open..." even though "net use" reports none.