I am in the process of implementing a new SAMBA install Version
3.6.3-34.12.1-2797-SUSE-SL12.1-x86_64 on OpenSuse 12.1
I am using LDAP as my backend and LAM to manage my LDAP accounts. Thing
were going well until recently. Suddenly any newly created user can not
logon (win7). Any accounts that I created prior to last week can still
logon to the workstation.
The only changes I recall making involve add machine script. I moved from
using useradd to using smbldap-useradd so machine accounts would only be
created in LDAP and not locally. Also, in yast, I changed the LDAP client
Naming Context from ou=users,dc=nctschools,dc=org to
dc=nctschools,dc=org to allow the local LDAP client to find machine
accounts, as they are not created in the user context.
However, I don't believe any of these changes could be causing the "group
policy client service failed the logon. Access denied" error I am
receiving. I could be wrong though. Any help would be GREAT.