samba - Jan 2006 - Chaning domain pass influences the certificates in IE

Hi,

We are using Samba 3.0.21a as with LDAP as PDC. User must change their 
password every 30 days and the password history is 24 months. 
Whenever users are forced to change their passwords, something strange 
happens.
When users change their domain password, the private keys on all imported 
IE certificates get lost, and the only solution is to once again import 
the certificate into IE, or changing the password back to the old ones. 
Sounds like a Windows problem, but I don't know anyone with a Windows PDC 
that has such problem.

Any idea?

Thanx