求助关于Samba3.6.3作PDC,Winxp不能正常登录的问题

TOLLY

之前服务器是R8.2+Samba3.5+LDAP的，后来换了新服务器就重新安装了个R9.0+Samba3.6.3+LDAP。
问题就来了，因为升级到3.6后，idmap有重大变更，我重写了idmap部分的配置，但还是不成功。
故障现象为XP的client不能登录，可以访问共享目录，但原来可以读写的目录变为只读。
如果降级为3.5，用回原来的配置文件，一切正常...

在网上爬了一天了，没搜索到有用的信息，真是晕菜了。。。

以下为log.nmbd的出错提示：

1. 
   
2. 
   
3. [2012/03/27 17:10:21,  0] lib/charcnv.c:543(convert_string_talloc)
   
4.   Conversion error: Illegal multibyte sequence()
   
5. [2012/03/27 17:10:21,  1] ../librpc/ndr/ndr.c:414(ndr_pull_error)
   
6.   ndr_pull_error(5): Bad character conversion with flags 0x400042
   
7. [2012/03/27 17:10:21,  1] nmbd/nmbd_processlogon.c:353(process_logon_packet)
   
8.   process_logon_packet: Failed to pull logon packet
   

复制代码

以下为smb.conf的配置

1. 
   
2. 
   
3. [global]
   
4.         dos charset = cp936
   
5.         unix charset = cp936
   
6.         display charset = cp936
   
7.         workgroup = XXX
   
8.         server string = XXX's Server
   
9.         interfaces = em0, lo0
   
10.         bind interfaces only = Yes
    
11.         passdb backend = ldapsam:ldap://127.0.0.1
    
12.         pam password change = Yes
    
13.         passwd program = /usr/local/sbin/smbldap-passwd -u %u
    
14.         passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new password*" %n\n"
    
15.         client use spnego principal = Yes
    
16.         send spnego principal = Yes
    
17.         syslog = 0
    
18.         log file = /var/log/samba/%m
    
19.         max log size = 200
    
20.         smb ports = 139
    
21.         min receivefile size = 16384
    
22.         name resolve order = lmhosts bcast host
    
23.         time server = Yes
    
24.         deadtime = 120
    
25.         load printers = No
    
26.         printcap name = /etc/printcap
    
27.         disable spoolss = Yes
    
28.         add user script = /usr/local/sbin/smbldap-useradd -m %u
    
29.         delete user script = /usr/local/sbin/smbldap-userdel %u
    
30.         add group script = /usr/local/sbin/smbldap-groupadd -p %g
    
31.         delete group script = /usr/local/sbin/smbldap-groupdel %g
    
32.         add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g
    
33.         delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u %g
    
34.         set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
    
35.         add machine script = /usr/local/sbin/smbldap-useradd -w %m
    
36.         logon script = logon.bat
    
37.         logon path = \\%L\Profiles\%U
    
38.         logon drive = U:
    
39.         logon home = \\%L\home\%U
    
40.         domain logons = Yes
    
41.         os level = 65
    
42.         preferred master = Yes
    
43.         domain master = Yes
    
44.         dns proxy = No
    
45.         wins support = Yes
    
46.         ldap admin dn = cn=Manager,dc=xxx,dc=com
    
47.         ldap delete dn = Yes
    
48.         ldap group suffix = ou=Groups
    
49.         ldap idmap suffix = ou=Idmap
    
50.         ldap machine suffix = ou=Computers
    
51.         ldap passwd sync = yes
    
52.         ldap suffix = dc=xxx,dc=com
    
53.         ldap ssl = no
    
54.         ldap user suffix = ou=People
    
55.         remote announce = 192.168.11.255/ASA
    
56.         socket address = 192.168.11.8
    
57. #//以下为升级到3.6添加部分
    
58.         winbind enum users = Yes
    
59.         winbind enum groups = Yes
    
60.         winbind use default domain = Yes
    
61.         idmap config XXX : range = 10000-500000
    
62.         idmap config XXX : ldap_url = ldap://127.0.0.1
    
63.         idmap config XXX : ldap_user_dn = cn=Manager,dc=xxx,dc=com
    
64.         idmap config XXX : ldap_base_dn = ou=Idmap,dc=xxx,dc=com
    
65.         idmap config XXX : default = yes
    
66.         idmap config XXX : readonly = no
    
67.         idmap config XXX : backend = ldap
    
68.         ldapsam:editposix = yes
    
69.         ldapsam:trusted = yes
    
70.         idmap config * : backend = ldap
    
71. #//以上为升级到3.6添加部分
    
72. 
    
73. #//以下为3.5版本的相应idmap部分
    
74. #      idmap backend              = ldap:ldap://127.0.0.1
    
75. #      idmap uid                     = 10000-500000
    
76. #      idmap gid                     = 10000-500000
    
77. #//以上为3.5版本的相应idmap部分
    
78. 
    
79.         hosts allow = 192.168.11., 127.
    
80.         aio read size = 16384
    
81.         aio write size = 16384
    
82.         aio write behind = /*.tmp/*.bak/*.psd/*.ac$/
    
83.         ea support = Yes
    
84.         map acl inherit = Yes
    
85.         use sendfile = Yes
    
86.         map archive = No
    
87.         map readonly = no
    
88.         store dos attributes = Yes
    
89. 
    
90. [netlogon]
    
91.         comment = Network Logon Service
    
92.         path = /pub/netlogon
    
93.         write list = root
    
94.         read only = No
    
95.         create mask = 0444
    
96.         guest ok = Yes
    
97.         browseable = No
    
98.         locking = No
    
99.         root preexec = /usr/home/root/sh/mkhome.sh
    
100. 
     
101. [Profiles]
     
102.         comment = Network Profiles Service
     
103.         path = /pub/Profiles
     
104.         read only = No
     
105.         create mask = 0600
     
106.         directory mask = 0700
     
107.         profile acls = Yes
     
108.         hide files = /desktop.ini/ntuser.ini/NTUSER.*/
     
109.         browseable = No
     
110. 
     
111. #以下省略....
     

复制代码