[Samba] Urgent Please - Samba 3.0.1 - LDAP - WinXP ... has anyone got it working???

[Davide Frey]

I've been trying to have Samba 3.0.1 work as a primary domain controller 
using LDAP as the authentication mechanism.

However I am unable to get any of my Windows XP Pro  machine join the 
domain. When prompt for an account with permissions to join the domain 
by the XP client, I give it the Administrator account which is granted 
Full access to the LDAP directory (BTW this is poor security, what is 
the right privilege I should give to the Domain Admin?), but SAMBA still 
responds with a permission denial when trying to open the domain and 
create the machine account.

Here is a log of what happens on the samba server when I attempt the 
join operation.


[2004/01/05 16:20:28, 2] smbd/sesssetup.c:setup_new_vc_session(544)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2004/01/05 16:20:28, 2] smbd/sesssetup.c:setup_new_vc_session(544)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2004/01/05 16:20:28, 2] lib/smbldap.c:smbldap_search_suffix(1068)
  smbldap_search_suffix: searching 
for:[(&(&(uid=Administrator)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
[2004/01/05 16:20:29, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: Administrator
[2004/01/05 16:20:40, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1636)
  ldapsam_search_one_group: searching 
for:[(&(objectClass=sambaGroupMapping)(gidNumber=513))]
[2004/01/05 16:20:40, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [Administrator] -> 
[Administrator] -> [Administrator] succeeded
[2004/01/05 16:20:41, 2] smbd/server.c:exit_server(558)
  Closing connections
[2004/01/05 16:20:42, 2] smbd/sesssetup.c:setup_new_vc_session(544)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2004/01/05 16:20:42, 2] smbd/sesssetup.c:setup_new_vc_session(544)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2004/01/05 16:20:42, 2] lib/smbldap.c:smbldap_search_suffix(1068)
  smbldap_search_suffix: searching 
for:[(&(&(uid=Administrator)(objectclass=sambaSamAccount))(objectclass=sambaSamAccount))]
[2004/01/05 16:20:43, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: Administrator
[2004/01/05 16:20:52, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1636)
  ldapsam_search_one_group: searching 
for:[(&(objectClass=sambaGroupMapping)(gidNumber=513))]
[2004/01/05 16:20:52, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [Administrator] -> 
[Administrator] -> [Administrator] succeeded
[2004/01/05 16:20:53, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461)
  Returning domain sid for domain SOLA -> 
S-1-5-21-238816456-3885207889-2738941293
[2004/01/05 16:20:53, 2] 
rpc_server/srv_samr_nt.c:access_check_samr_object(93)
  _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)
[2004/01/05 16:20:53, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2461)
  Returning domain sid for domain SOLA -> 
S-1-5-21-238816456-3885207889-2738941293
[2004/01/05 16:20:53, 2] 
rpc_server/srv_samr_nt.c:access_check_samr_function(115)
  _samr_create_user: ACCESS DENIED (granted: 0x00000201;  required: 
0x00000010)
[2004/01/05 16:20:53, 2] smbd/server.c:exit_server(558)
  Closing connections


Does anyone have any suggestion on how to sort this out?

thanks

Davide