[Samba] No machine account possible?

[Christian H. Kuhn]

Hi all,

Yesterday, i changed from samba 2.2.3 to samba 3.0, and also i changed
the machines which samba is running on. Samba worked and should work
as a PDC. It runs on a Debian sid, the test client is a notebook with
XP Professional.

Yesterday, immediately after migrating, everything worked fine. Even
after several reboots, i could logon as a domain user, and i could use
the shares. Today, i can't.

To find the error, i followed the diagnosis on
http://samba.sernet.de/diagnosis.html#toc9. For it is in german, i
will shortly name the successful tests: testparm, ping (both
directions), smbclient -L, nmblookup __SAMBA__, nmblookup -d 2 '*',
nmblookup -B client '*', local smbclient '\\server\share'. What not
worked is a net view \\pdchome from the client.

If i try to change name and domain on the client, i use \\pdchome\root
as user, and i get "wrong parameter" and no entry in the server
logs. If i try a smbpasswd -a -m unterwegs on the server, i get
home:/etc/samba# smbpasswd -a -m unterwegs 
Failed initialise SAM_ACCOUNT for user unterwegs$. 
Failed to modify password entry for user unterwegs$.

This is my smb.conf:
[global]
workgroup = QNOWOHNUNG
netbios name = PDCHOME
server string = %h (Samba %v)
obey pam restrictions = Yes
password server = 
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
unix password sync = Yes
log level = 4
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
time server = Yes
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096
printcap name = 
domain logons = Yes
os level = 34
preferred master = Yes
domain master = Yes
wins support = Yes
ldap ssl = no
panic action = /usr/share/samba/panic-action %d
printing = cups

[homes]
comment = Heimatverzeichnis von %u
read only = No
browseable = No

[public]
comment = Oeffentliches Verzeichnis
path = /usr/export/public
read only = No
guest ok = Yes

[netlogon]
comment = Anmeldedienst für die Domäne
path = /usr/export/netlogon
browseable = No

Any hints?

TIA
Chris
-- 
|     .-.     |   Diese Nachricht wurde erstellt mit   |     .-.     |
|     /v\     |   Hilfe eines freilaufenden Pinguins   |     /v\     |
|   /(   )\   |   aus artgerechter Freiland Haltung !  |   /(   )\   |
|    ^^ ^^    |     <=     Tux the penguin      =>     |    ^^ ^^    |