[Samba] ACL problem with WinXP and Samba 2.2.5-2.2.8

[Johannes Tyve]

Trying to add users using security tab i WinXP doesn't work for us, no 
users are added. Existing ACLs are possible to change and delete.

This behavior has been identified with both Solaris 2.6, Linux 2.4.9-31 
with XFS,  Samba 2.2.5 and 2.2.8. I'm attaching global part of out 
smb.conf and a snippet from the log.

Our users are in an NT domain and in NIS.

Regards,
Johannes

smb.conf:
[global]
        workgroup = SGU
        security = DOMAIN
        encrypt passwords = Yes
        min passwd length = 6
        password server = sys4 sgu4
        username map = /usr/local/samba/lib/users.map
        log file = /var/opt/samba/log/%m
        deadtime = 10
        character set = ISO8859-1
        wins server = 10.1.20.104
        invalid users = smsclitoknacct& smsclisvcacct&
        create mask = 0644
        host msdfs = yes
        inherit acls = yes
        log level = 2

Log:

[2003/03/28 16:09:27, 2] lib/util_sock.c:open_socket_out(873)
  error connecting to 10.1.20.104:445 (Connection refused)
[2003/03/28 16:09:28, 1] smbd/service.c:make_connection(636)
  sp078 (10.1.20.94) connect to service lab as user jste (uid=133, 
gid=100) (pid 10936)
[2003/03/28 16:09:39, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:09:42, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 -> 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:09:42, 2] passdb/pdb_smbpasswd.c:startsmbfilepwent(170)
  startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd. 
Error was No such file or directory
[2003/03/28 16:09:42, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1418)
  unable to open passdb database.
[2003/03/28 16:09:46, 0] smbd/posix_acls.c:create_canon_ace_lists(1017)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1444693150-211357965-837300805-2170 to uid or gid.
[2003/03/28 16:11:25, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:11:28, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 -> 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:11:35, 0] smbd/posix_acls.c:create_canon_ace_lists(1017)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1444693150-211357965-837300805-1084 to uid or gid.
[2003/03/28 16:11:37, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:11:39, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 -> 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:12:06, 0] smbd/service.c:make_connection(251)
  sp078 (10.1.20.94) couldn't find service la
[2003/03/28 16:12:08, 2] 
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
  Returning domain sid for domain PCHYD29 -> 
S-1-5-21-195616947-1880241807-4126645089
[2003/03/28 16:12:17, 0] smbd/posix_acls.c:create_canon_ace_lists(1017)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1444693150-211357965-837300805-1029 to uid or gid.
[2003/03/28 16:13:35, 1] smbd/service.c:close_cnum(675)
  sp078 (10.1.20.94) closed connection to service lab
[2003/03/28 16:13:35, 2] smbd/server.c:exit_server(511)