[Samba] net rpc testjoin error

[John G. Heim]

I have a PDC running debian wheezy with samba 3.5.11 . If I run 'net rpc 
testjoin' on my PDC, it does this:

# net rpc testjoin
get_schannel_session_key: could not fetch trust account password for domain 
'UW-MATH'
net_rpc_join_ok: failed to get schannel session key from server HUBBLE for 
domain UW-MATH. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Join to domain 'UW-MATH' is not valid: NT_STATUS_CANT_ACCESS_DOMAIN_INFO

The backend is openldap and I can find the name of my PDC in the ldap 
database. It appears to have a valid machine trust account based on the ldap 
record.

The main problem I'm having is that after I joined a Win7 machine to the 
domain, I can't log in as a domain user. It says "The trust relationship 
between this workstation and the domain failed."