[Samba] Samba 3.0.14 - very puzzling domain browsing problems

[Stephen Bosch]

Anthony Messina wrote:
> something simple, perhaps too simple...
> 
> this once happened to me and i realized it was that the workgroup name
> that i had specified in samba was not the same as the one in windows, or
> that i had not joined the proper domain.
> 
> or
> 
> is your windows computer set up to use the right wins server?

Alas, I wish it were this simple.

The domain in question is definitely consistent between workstations and
the PDC -- as I noted in a previous post, if the OS level is set to 0
and the domain, preferred and local master are set to "no", one of the
Windows machines becomes the domain master browser and suddenly
workstations appear in the browse list.

I'm determined to find the cause of this problem, whatever it takes.
I've followed the Samba how-to and everything should be working, but
obviously I'm missing something somewhere...

Here's my smb.conf:

###############################################################################
# GLOBAL PARAMETERS
###############################################################################

[global]
# NOTE: change these parameters to suit your business
workgroup = HEDLIN-LAUDER
netbios name = PDC
passdb backend = ldapsam:ldap://ldap.hedlinlauder.com/
ldap admin dn = cn=samba,ou=dsa,dc=hedlinlauder,dc=com
ldap suffix = dc=hedlinlauder,dc=com
# interface list should be specified for machines with > 1 interface
;interfaces = <IP1>,<IP2>,...

###############################################################################
# NOTE: You should not have to change any of the other GLOBAL PARAMETERS
#       beyond this point, as long as you are building a PDC without WINS
#       using cups for printing. You may need to change the SHARE
DEFINITIONS
#       (see below) however.
###############################################################################

server string = Samba Server %v
domain logons = yes
os level = 65
domain master = yes
preferred master = yes
local master = yes
wins support = yes
time server = yes
name resolve order = wins bcast lmhosts

logon script = %U.bat
logon drive = H:
logon path = \\%L\Profiles\%U
;logon home = \\%L\%U\.profile

# ldap configuration
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=Hosts
ldap idmap suffix = ou=Idmap
ldap ssl = start_tls
ldap delete dn = yes
add user script = /usr/sbin/smbldap-useradd -a -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"

# printers configuration
printer admin = @"Print Operators"
load printers = yes
create mask = 0640
directory mask = 0750
printing = cups
printcap name = cups
deadtime = 10

# other
guest account = nobody
map to guest = Bad User
show add printer wizard = yes
preserve case = yes
short preserve case = yes
case sensitive = no
enable privileges = yes
username map = /etc/samba/smbusers
security = user
encrypt passwords = yes
obey pam restrictions = no
ldap passwd sync = yes
log level = 2
syslog = 0
log file = /var/log/samba/log.%m
max log size = 5000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
Dos charset = 850
Unix charset = ISO8859-1

-Stephen-