[Samba] AD-Shares not accessible with 3.0.31

[Jens Nissen]

Starting with version 3.0.31, it is not possible to access shares on a 
Windows Server 2000 SP4, even though it is possible to join the domain 
controlled by that Server.
The same configuration worked "fine" (for one hour) with 3.0.30.
What has changed? What do I need to configure or compile differently to
get back to 3.0.2x behaviour?

The commands
#> wbinfo -u
#> wbinfo -g
#> wbinfo -a DOMAIN\\Administrator%PASS
#> wbinfo -t
#> net ads testjoin -s /path_to_config
all work fine.

Replacing the 3.0.31 files one by one with 3.0.30 files again gives me a 
somewhat working system, so it it must be something with 3.0.31.

Not my day :-(

The error log looks like this:

[2008/07/18 15:34:43, 10] smbd/sesssetup.c:reply_spnego_kerberos(364)
   Mapped to [DOMAIN] (using PAC)
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
   Finding user DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
   Trying _Get_Pwnam(), username as lowercase is candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
   Trying _Get_Pwnam(), username as given is DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
   Trying _Get_Pwnam(), username as uppercase is DOMAIN\ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
   Checking combinations of 0 uppercase letters in candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
   Get_Pwnam_internals didn't find user [DOMAIN\Administrator]!
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
   Finding user Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
   Trying _Get_Pwnam(), username as lowercase is administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
   Trying _Get_Pwnam(), username as given is Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
   Trying _Get_Pwnam(), username as uppercase is ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
   Checking combinations of 0 uppercase letters in administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
   Get_Pwnam_internals didn't find user [Administrator]!
[2008/07/18 15:34:43, 10] nsswitch/winbindd.c:process_request(321)
   process_request: request fn PING
[2008/07/18 15:34:43, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)
   [ 2360]: ping
[2008/07/18 15:34:43, 1] smbd/sesssetup.c:reply_spnego_kerberos(439)
   Username DOMAIN\Administrator is invalid on this system
[2008/07/18 15:34:43, 3] smbd/error.c:error_packet_set(106)
   error packet at smbd/sesssetup.c(444) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(484)
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(494)
   size=35
   smb_com=0x73
   smb_rcls=109
   smb_reh=0
   smb_err=49152
   smb_flg=136
   smb_flg2=51201
   smb_tid=0
   smb_pid=65279
   smb_uid=101
   smb_mid=33152
   smt_wct=0
   smb_bcc=0



[global]
         dos charset = ISO-8859-1
         unix charset = ISO-8859-1
         display charset = ISO-8859-1
         workgroup = DOMAIN
         realm = DOMAIN.TEST
         server string = intradisk NASdrive (IP:%$(IPADDR))
         interfaces = ixp0
         security = ADS
         allow trusted domains = No
         password server = sbs2000.candeo.test
         private dir = /var/lib/adsamba/private
         passdb backend = tdbsam
         guest account = samba
         log level = 6
         log file = /var/log/adsamba/smblog.ad
         max log size = 0
         name resolve order = wins bcast host
         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE 
SO_RCVBUF=8192 SO_SNDBUF=8192
         load printers = No
         show add printer wizard = No
         preferred master = No
         local master = No
         domain master = No
         wins server = 192.168.1.4
         idmap uid = 1000-60000
         idmap gid = 1000-60000
         winbind enum users = Yes
         winbind enum groups = Yes
         winbind offline logon = Yes
         admin users = DOMAIN\\Administrator
         ea support = Yes