[Samba] PDC Migration - Mapping user []\[] from...

[Mike Boyd]

Hi,

I'm trying to migrate our PDC from samba 2.2.3 on redhat 7.3 to samba
3.0.10 on fedora core 3.  We use smbpasswd which I have copied to the
new server - all the unix users and groups are yp'd so they're the same
on both servers.

Everything seems to work fine initially.  Most people can log on and get
their roaming profile from most machines (they can all log in from their
own computer).  Only some combinations of user and machine fail (and no
combinations fail using the old server).  With logging set to auth:10
the first difference in the log between a successful login and an
unsuccessful one is:

successful:
[2005/03/18 11:11:27, 5] auth/auth_util.c:make_user_info_map(225)
   make_user_info_map: Mapping user [NTPSA]\[mb] from workstation [NAIAD]

unsuccessful:
[2005/03/18 11:15:05, 5] auth/auth_util.c:make_user_info_map(225)
   make_user_info_map: Mapping user []\[] from workstation [CORDELIA]

It seems like there is some user/machine state information being held
somewhere rather than the server just authenticating the machine and
user using smbpasswd and the unix users and groups.  I tried copying
over all the *.tdb files from /var/cache/samba as well, no dfference.  I
also tried deleting all the cached user info in c:\Docouments and
Settings on one of the machines with the problem, still no difference.

Any ideas? I'm really stuck :(  Oh yeah, here's my smb.conf

[global]
    workgroup = NTPSA
    netbios name = NT-AuthSvr
    netbios aliases = NT-PrintSvr NT-FileSvr
    server string = theta - Samba Server

    hosts allow = 62.189.125. 127. 81.86.215.217
    interfaces = 62.189.125.41/25
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

    load printers = no

    log level = auth:10
    log file = /var/log/samba/%m.log
    max log size = 1000

    security = user
    password level = 50
    username level = 10
    encrypt passwords = yes
    smb passwd file = /etc/samba/private/smbpasswd
    preserve case = yes
    short preserve case = yes
    default case = lower
    case sensitive = no
    mangled names = no

    nt acl support = no
    logon home = \\%N\%U
    logon drive = u:
    logon path = \\%N\%U\.winprofile\ntprofile

    local master = yes
    os level = 35
    domain master = yes
    preferred master = yes
    domain logons = yes

    time server = yes
    dns proxy = no

#============================ Share Definitions
==============================
    idmap uid = 16777216-33554431
    idmap gid = 16777216-33554431
    template shell = /bin/false
    winbind use default domain = no

[homes]
    comment = %U's Home Directory
    browseable = no
    writeable = yes

[netlogon]
    comment = Network Logon Service
    path = /home/ntpsa/groups/%g
    browseable = no

[tmp]
    comment = Temporary file space
    path = /tmp
    writeable = yes
    inherit permissions = yes