[Samba] Re: Can join domain, can't login -- LDAP PDC

[Tom Skeren]

Igor Belyi wrote:

> Chris St. Pierre wrote:
>
>> "The system cannot log you on to this domain because the system's
>> computer account in its primary domain is missing or the password on
>> that account is incorrect."
>>
>> I suspected that neither of these were the case, as I created the
>> account with idealx's smbldap-tools, so I checked through the slapd
>> logs after a login attempt and, strangely, Samba was never even
>> querying the LDAP server.  I checked the Samba logs, and here's what I
>> get whenever I try to login:
>
>
> This is the usual simptom of nscd at work. 

I keep reading that this is the problem.  However, FBSD has no daemon 
called nscd.  It is simply, for me, not possible that this is the problem.

> It caches negative and positive answers and when Samba makes NSS 
> requests it get it from nscd which doesn't bother to go into LDAP.
>
> I would suggest to turn nscd off untill you have all your machines and 
> users in LDAP.
>
> Igor
>