1 user can't login in LDAP

[naerey]

Using openSUSE 11.4 (x86_64) as LDAP/SAMBA server. Clients use win2k/xp/vista/7 to connect. Until a few days ago everything worked fine. Users would connect to domain and work.
The other day a lady wrote the password wrong 5 times and got her account blocked. I unlocked it, removing the 'L' flag and set badpasswordcount=0 using YaST2, and got her a new password. Alas, still can't login. Says user/password incorrect. All the other users are fine however.
Tried creating a new user, this one can't login either.

Any ideas how to fix? Or work-arounds?

[naerey]

OK, so there are two problems here.
1) Winbox takes time to fetch domain info... no idea how to fix or anything, but waiting 5min after starting up helps. Not a big problem, can be ignored.

2) ldap and samba are not in sync. Changing password with LDAP gets me nowhwere, whereas sambapasswd does the trick.
pdbedit also shows all the updated info (e.g. SambaBadPasswordCount when I purposely enter it wrongly a few times), whereas LDAP shows outdated info.
Question is, why does it not sync? And, how do I get it to sync once again?

Sorry for me spamming the forums!