[Samba] SAMBA 3.0.2/LDAP can't login from joined workstation?

[Norm Dressler]

Hi All,

Problem with PDC Samba 3.0.2/LDAP with the new schema.  I've joined a
Windows 2000 workstation to the domain - no problems there.  But I can't
log into the domain.  I get an error from the Windows 2000 machine
saying The system could not log me on.

In the workstation's log file on the server the only error I can see is
as follows:

[2004/02/19 13:28:18, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
      0228 status      : NT_STATUS_OK
[2004/02/19 13:28:18, 0] rpc_parse/parse_prs.c:prs_dump_region(68)
  created /tmp/out_NETLOGON_2.5.prs
[2004/02/19 13:28:18, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
  api_rpcTNP: called NETLOGON successfully
[2004/02/19 13:28:18, 10] rpc_server/srv_pipe.c:api_rpcTNP(1560)
  api_rpcTNP: rpc input buffer underflow (parse error?)
[2004/02/19 13:28:18, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
  0128 : 8a e3 13 71 02 f4 36 71 01 40 04 00 01 00 00 00 77 00 ff ff ff
ff 00 00 44 05 08 00 08 e3 09 00
[2004/02/19 13:28:18, 3]
rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 4870

The log shows that the Samba server sees the requested login as
administrator (the user I'm trying) it indicates that I've authenticated
but it seems Windows 2000 doesn't agree.  Am I missing something on the
Windows 2000 side?  I've checked the registry files found under docs and
have tried the signedorsealed setting -- no difference.  i've also
verified my security settings are disabled on the system and that plain
passwords are used.

I should mention I'm using the SMBLDAP scripts from Idealx to add the
workstation to the domain automatically.  The first time I try to add
it, it gives a user or password error, but it does add the workstation
to LDAP and then joins the domain on the second time.  I'm still looking
into that error but I don't believe it's related -- or is it? 

Any help would be appreciated.

Norm