[Samba] NetLogin error 5722 / Domain password server not available.

[Michael Bartosh]

When W2K clients try to access a samba server joined to the domain, 
we get a NETLOGIN 5722 event:

The session setup from the computer SAMBA failed to authenticate. The 
name of the account referenced in the security database is SAMBA$. 
The following error occured:
Access is denied.

The samba side of things is a bit more verbose (note error at bottom of page)

I've found numerous references to this error online, but no 
solutions. One post suggested re-joining the domain, which I've 
attempted- the join succeeds, but authentication still fails.

Join process:

a) Add pre-Win2K account with AD Users and computers
b) sudo smbpasswd -j EXAMPLE -r W2K -U Administrator%passwd
c) in smb.conf:
		security = domain
		password server = W2K


[2003/01/05 16:49:38, 3] 
/SourceCache/samba/samba-21/source/lib/util_sock.c:open_socket_out(830)
   Connecting to 192.168.1.2 at port 445
[2003/01/05 16:49:38, 4] 
/SourceCache/samba/samba-21/source/rpc_client/cli_netlogon.c:cli_net_req_chal(221)
   cli_net_req_chal: LSA Request Challenge from W2K to SAMBA: 965B45EE4F419A71
[2003/01/05 16:49:38, 4] 
/SourceCache/samba/samba-21/source/libsmb/credentials.c:cred_session_key(60)
   cred_session_key
[2003/01/05 16:49:38, 4] 
/SourceCache/samba/samba-21/source/libsmb/credentials.c:cred_create(91)
   cred_create
[2003/01/05 16:49:38, 4] 
/SourceCache/samba/samba-21/source/rpc_client/cli_netlogon.c:cli_net_auth2(132)
   cli_net_auth2: srv:\\WI2K acct:SAMBA$ sc:2 mc: SAMBA chal 
B58AF439B186C221 neg: 1ff
[2003/01/05 16:49:38, 0] 
/SourceCache/samba/samba-21/source/rpc_client/cli_netlogon.c:cli_net_auth2(157)
   cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2003/01/05 16:49:38, 0] 
/SourceCache/samba/samba-21/source/rpc_client/cli_login.c:cli_nt_setup_creds(74)
   cli_nt_setup_creds: auth2 challenge failed
[2003/01/05 16:49:38, 0] 
/SourceCache/samba/samba-21/source/smbd/password.c:connect_to_domain_password_server(1340)
   connect_to_domain_password_server: unable to setup the PDC 
credentials to machine W2K. Error was : NT_STATUS_OK.
[2003/01/05 16:49:38, 0] 
/SourceCache/samba/samba-21/source/smbd/password.c:domain_client_validate(1558)
   domain_client_validate: Domain password server not available.