Context is Samba 3.0.21a, LDAP backend, Fedora 3, Samba is the domain controller. Joining an NT4 Workstation to the domain in the usual manner, from the workstation apparently succeeds, but nobody can log on to the domain from said workstation. Slapcating the LDAP database shows that a machine account has been created with sambaAcctFlags = DW. Doing the same from a Win2k or XP workstation creates a machine account with sambaAcctFlags = W I assume this is a bug and not a feature?