samba - Jul 2008 - Winbind problem

Hi.

I'm trying to authenticate my proxy server (Debian Stable) to the
Active Directory domain managed by a Windows 2003 Standard Server, but
I have some problems:

proxy:~# net join -w TEST.LOCAL -S win2003test -U Administrator
Administrator's password:
[2008/07/26 15:31:31, 0] libads/kerberos.c:ads_kinit_password(208)
  kerberos_kinit_password PROXY$@TEST.LOCAL failed: Preauthentication failed
[2008/07/26 15:31:31, 0] utils/net_ads.c:ads_startup(289)
  ads_connect: Preauthentication failed
ADS join did not work, falling back to RPC...
Joined domain TEST.

proxy:~# wbinfo -u
Error looking up domain users
proxy:~# wbinfo -g
Error looking up domain groups

This is my /etc/samba/smb.conf:

[global]
  server string = Samba Proxy
  password server = win2003test
  security = domain
  encrypt passwords = yes
  workgroup = TEST.LOCAL
  winbind separator = @
  template homedir = /home/%D/%U
  template shell = /bin/bash
  winbind uid = 10000-20000
  winbind gid = 10000-20000
  winbind enum users = yes
  winbind enum groups = yes
  log file = /var/log/samba/%m.log
  max log size = 50
  socket options = TCP_NODELAY
  realm = TEST.LOCAL

Could you help me to solve this problem, please?

Thank you very much!
Bye.

>
> [global]
>  server string = Samba Proxy
>  password server = win2003test
>  security = domain
>  encrypt passwords = yes
>  workgroup = TEST.LOCAL
>  winbind separator = @
>  template homedir = /home/%D/%U
>  template shell = /bin/bash
>  winbind uid = 10000-20000
>  winbind gid = 10000-20000
>  winbind enum users = yes
>  winbind enum groups = yes
>  log file = /var/log/samba/%m.log
>  max log size = 50
>  socket options = TCP_NODELAY
>  realm = TEST.LOCAL

You must use "security = ads" to join an Active Directory domain. Read
the
smb.conf man page for more information. Also, make sure, that you have the
Kerberos libraries installed on your Debian machine (Heimdal or MIT).