samba - Nov 2006 - Mapping of Windows SID to existing UNIX users not work

There was a thread in the past, i know, but i have not found any solution:

I have a domain member server Samba 3.0.23c and an AD witch manage the users.
Always a user tries to add permissions for an other user I got the error in
log.smb

create_canon_ace_lists: unable to map SID
S-1-5-21-3120594657-2306910035-793260449-1128 to uid or gid.

Which means that the Windows SID is not able to map to the existing UNIX User.

but:

root@con83:/var/samba/log# wbinfo -n weber
S-1-5-21-3120594657-2306910035-793260449-1128 User (1)

root@con83:/var/samba/log# wbinfo -s
S-1-5-21-3120594657-2306910035-793260449-1128
CONTAC0\weber 1

The option
winbind trusted domains only = No
or
winbind trusted domains only = Yes
has nothing help.


smb.conf
[global]
workgroup = CONTAC0
security = DOMAIN
password server = con40.contac.lan
log level = 10
preferred master = No
local master = No
domain master = No
wins support = Yes
ldap ssl = no

[edv]
path = /var/samba/share/edv
read only = No

[docu]
path = /var/samba/share/docu
read only = No

[vertrieb]
path = /var/samba/share/vertrieb
read only = No

[support]
path = /var/samba/share/support
read only = No

[homes]
read only = No

Any hint?
Thanks