samba - Oct 2004 - Samba as domain member server cannot authenticate users

Hi all,

I use Samba 3.0.9 on Debian Woody. I use it as domain member server:

workgroup = testdomen
security = domain

When I join it to domain, it seems it is ok:

newhas1:~# net rpc join -U dj.dule%pass
Joined domain TESTDOMEN.

wbinfo -u lists users, getent passwd also works fine.

But when I try to access server from XP comp logged onto a domain, i 
cannot. I found this in logs:

[2004/10/20 11:48:53, 0] auth/pampass.c:smb_pam_account(573)
  smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management 
for User: TESTDOMEN+100
[2004/10/20 11:48:53, 0] auth/pampass.c:smb_pam_accountcheck(781)
  smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User 
TESTDOMEN+100!
[2004/10/20 11:48:53, 0] auth/pampass.c:smb_pam_account(573)
  smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management 
for User: TESTDOMEN+100
[2004/10/20 11:48:53, 0] auth/pampass.c:smb_pam_accountcheck(781)
  smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User 
TESTDOMEN+100!

User 100 is valid user on domain controler.

Any idea ?
-- 
Eng. Dusan Djordjevic (RHCE)