[Samba] Cannot join domain from WinXP

[Martin Konicek]

===INFO===
Server: Fedora Core 2, Samba 2
Client: Windows XP, all TCP incoming ports firewalled, outgoing TCP
permited
Problem: Cannot join to domain

===SHORT-LOG===
write_socket: Error writing 5 bytes to socket 23: ERRNO = Connection
reset by peer

===FULL-LOG===
[2005/09/21 17:56:44, 0] lib/util_sock.c:write_socket(455)
[2005/09/21 17:56:44, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.1.23)
  write_socket: Error writing 5 bytes to socket 23: ERRNO = Connection
reset by peer
[2005/09/21 17:56:44, 0] lib/util_sock.c:send_smb(647)
  Error writing 5 bytes to client. -1. (Connection reset by peer)
[2005/09/21 17:56:44, 2] smbd/server.c:exit_server(571)
  Closing connections
[2005/09/21 17:56:51, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2005/09/21 17:56:51, 2] lib/access.c:check_access(324)
  Allowed connection from  (192.168.1.23)
[2005/09/21 17:56:51, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [root] -> [root] ->
[root] succeeded
[2005/09/21 17:56:51, 2] lib/module.c:do_smb_load_module(63)
  Module '/usr/lib/samba/vfs/vscan-clamav.so' loaded
[2005/09/21 17:56:51, 2]
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2482)
  Returning domain sid for domain DB ->
S-1-5-21-1539302983-2614652946-1652283448
[2005/09/21 17:56:52, 2] smbd/server.c:exit_server(571)
===smb.conf===
[global]
...
# scripts
  add user script = /usr/sbin/useradd -m %u
  delete user script = /usr/sbin/userdel -r %u
  add group script = /usr/sbin/groupadd %g
  delete group script = /usr/sbin/groupdel %g
  add user to group script = /usr/sbin/usermod -G %g %u
  add machine script =  /usr/sbin/useradd -s /bin/false -d /dev/null -g
machines %u
...
[Profiles]
  path = /home/profiles
  browseable = no
  guest ok = yes
  writable = yes
[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
   share modes = no



--
=========
Martin Koníček