samba - May 2007 - upgrade from 3.0.24 to 3.0.25 broke authentication

here's my
krb5.conf:-----------------------------------------------[libdefaults]       
default_realm = HQ.COMPANY.COM [realms]        HQ.COMPANY.COM = {               
kdc = 192.168.100.1        }[domain_realm]        .hq.company.com =
HQ.COMPANY.COM        hq.company.com =
HQ.COMPANY.COM----------------------------------------------- here's my
smb.conf-----------------------------------------------[global]        log file
= /var/log/samba/log.%m        encrypt passwords = yes        realm =
HQ.COMPANY.COM        server string = Samba Server        idmap uid =
10000-20000        idmap gid = 10000-20000        winbind use default domain =
yes        winbind enum users = yes        winbind enum groups = yes       
winbind separator = +        winbind nested groups = yes        workgroup =
COMPANY        security = ADS        preferred master = no        dns proxy = no
wins proxy = no        auth methods = winbind        max log size = 50       
log level = 1----------------------------------------------- it was working
perfectly until i upgraded.  i'm using heimdal 0.7.2. i get the following
error messages when i'm using 3.0.25:[2007/05/22 12:57:58, 1]
smbd/sesssetup.c:reply_spnego_kerberos(202)  Failed to verify incoming
ticket![2007/05/22 12:58:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(316) 
Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!kinit, net
ads join/status/info/lookup, wbinfo -u/g, getent all work fine. thanks.