[Samba] MS Server 2003 SP1 Domain Authentication

[Bradish, Jeff]

Wondering if anyone has had experience with Samba domain authentication
stops functioning when the domain controllers are upgraded from MS
Server 2003 to MS Server 2003 SP1.

Samba log errors are:
[2006/03/06 10:17:25, 3] smbd/reply.c:(880) Domain=[AMER]
NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002
5.1]
[2006/03/06 10:17:26, 0] rpc_client/cli_pipe.c:(1202)
cli_nt_session_open: cli_nt_create failed on pipe \NETLOGON to machine
USAHD100.  Error was NT_STATUS_ACCESS_DENIED
[2006/03/06 10:17:26, 0] smbd/password.c:(1358)
connect_to_domain_password_server: unable to open the domain client
session to machine USAHD100. Error was : NT_STATUS_ACCESS_DENIED

Samba Global Parameters
[global]
        workgroup = AMER
        netbios name = USAHSSMC001
        netbios aliases = USAHSSMC001
        server string = EDS GSCO
        security = DOMAIN
        encrypt passwords = Yes
        password server = usahd100
        username map = /etc/sfw/username.map
        log level = 2
        preferred master = No
        local master = No
        domain master = No
        dns proxy = No
        create mask = 0664

I can point the password server entry to a domain controller that has
not been upgraded to MS Server 2003 SP1 and authentication works as it
has for the past year. The problem is, the remaining domain controllers
are scheduled to be upgraded to SP1 in the next couple of weeks. So I
need to try and get this fixed before then.

I have tried installing Samba 3.0.21 but have received the same type of
errors when trying to join to the domain. Samba is running on a Solaris
8 server.

Any help here would be appreciated.

Jeff Bradish
* mailto: jeff.bradish at eds.com