[Samba] trouble with Machine accounts

[Honza Novacek]

Hi, all
please help me.

I have very big problem.
I´m vampire account WinNT PDC to Samba PDC.
Samba 3.0.10, passdb backend = tdbsam, Centos 4

I have 2 problems:

1. In LAN i have 30 computers, but 2 cann´t log onto windows
I get error "Windows cannot connect to the domain, either because the domain
controller is down or otherwise unavailable or because your computer 
account was not found. Please try again later"

28 computers logon OK. PC have the same configuration (SW and HW).

I found dissimilarity in account database:

pdbedit -Lw
All computers, who can log on to Windows have:
PC15$:4294967295:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:07B4795F87B1EAB5ECD75B952194CD75:[W          ]:LCT-425B6C7B:

And 2 computers have:
PC12$:585:5F480D9B744EF3B0EDC5BF1E0C9DE5CC:F80418BE1B6806776730CF75D6C2437B:[W          ]:LCT-4278BC8C:

Missing numero "4294967295" , (all computers "successfly" have the
same) and missing XXXXXXXXXXXXXXXXXXXXX.

I probe delete this 2 account:
pdbedit -x PC12, and new create: pdbedit -a -m -u PC12, without success.


2. Can not connect new computers to Domain. I try connect my
notebook,
adduser honzanb$
pdbedit -a -m honzanb$

In WinXPP Connect to Domain, show me windows, who I wrote
administrator/password. I get error: "Access denied"

log:

[2005/05/04 14:47:32, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/05/04 14:47:32, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/05/04 14:47:32, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [administrator] -> [administrator] -> [Administrator] succeeded
[2005/05/04 14:47:32, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.1.207)
[2005/05/04 14:47:33, 2] smbd/server.c:exit_server(571)
  Closing connections
[2005/05/04 14:47:33, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [administrator] -> [administrator] -> [Administrator] succeeded
[2005/05/04 14:47:33, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.1.207)
[2005/05/04 14:47:34, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482)
  Returning domain sid for domain KHEL -> S-1-5-21-1022826735-1298021733-666385194
[2005/05/04 14:47:34, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93)
  _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)


thank you,

Honza Novacek