[Samba] LDAP/SAMBA radmon domain logon error message

[Software Groups]

HI all,

I am testing ldap master/slave, samba pdc/bdc configuration. If all
the process running I was able to login to the domain.

Fedora core 4 (Master LDAP, Samba PDC):
Fedora core 3 (Slave ldap, samba BDC)

For testing I stop the ldap & samba process in random order. For some
situation I will get this domain logon error message.

The system cannot log you on this domain because the system computer
account in its primary domain is missing or the password on this
account is corrupted

Here is the screen shot of error.
http://www.sfgroups.com/download/samba/windowserr.GIF


To fix this I have to restart the samba process, any idea why I am
getting this error message. Do I need to change any configuration
values?


PDC smb.conf
 passdb backend = "ldapsam:ldap://localhost ldap://bdc"
        passwd program = /opt/IDEALX/sbin/smbldap-passwd -o %u
        add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
        delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
        delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod
-m "%u" "%g"
        delete user from group script =
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"
        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
        wins server = masterldap
dap delete dn = Yes
        ldap group suffix =
        ldap idmap suffix =
        ldap machine suffix = ou=Computers
        ldap passwd sync = no
        ldap replication sleep = 1000
  ldap ssl = no
        ldap timeout = 15
        ldap page size = 1024
        ldap user suffix = ou=People
        idmap backend = ldap:ldap://127.0.0.1


BDC smb.conf:

        passdb backend = "ldapsam:ldap://localhost ldap://pdc"
        passwd program = /opt/IDEALX/sbin/smbldap-passwd -o %u
        add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
        delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
        add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
        delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
        add user to group script = /opt/IDEALX/sbin/smbldap-groupmod
-m "%u" "%g"
        delete user from group script =
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
        set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g" "%u"
        add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"
        wins server = masterldap
 ldap delete dn = Yes
        ldap filter = (uid=%u)
        ldap group suffix =
        ldap idmap suffix =
        ldap machine suffix = ou=Computers
        ldap passwd sync = no
        ldap replication sleep = 1000
        ldap timeout = 15
        ldap user suffix = ou=People
        idmap backend = ldap:ldap://127.0.0.1



Thanks


--
Software Groups (SFG)
http://www.sfgroups.com