I've got a strange problem when adding a new computer to the domain.

If computer account does not exist:
1. Windows says account is not there and fails to add computer.
2. SAMBA creates an account on LDAP through smbldap-add.

Second attempt, when computer account exists:
2. Windows says account exists and fails to add computer.

I'm stuck in a permanent loop and I'm not sure what to do. Linux tools seem to be doing what they are supposed to, but I guess Windows doesn't like the return value of smbldap-add?

Thanks for any suggestions.

what does this command give you ? It should pull accounts from ads server so you can know if communication between it and the linux box is cool.Also are you sure you have your smb.conf right?

I'm only seeing the local accounts, but SAMBA is definitely talking to LDAP because if I try a wrong password when adding a new machine to the domain, it correctly fails to authenticate.

If your only seeing local accounts then there is a problem communicating with the ADS server.Maybe you missed a step.

If getent passwd isn't displaying your Windows accounts, it sounds like you need to configure /etc/nsswitch.conf. Your nsswitch.conf file should look something like the below:

passwd: files ldap
group: files ldap
shadow: files ldap

I would also double-check /etc/libnss-ldap.conf or /etc/ldap.conf. It should look something like:

base dc=DOMAIN,dc=com
uri ldaps://LDAPSERVER