samba - Sep 2007 - defunct netstat processes

I am running samba 3.0.23 with winbind joined to a windows 2003 AD  
domain. Over time, I've noticed that winbindd shows forked zombied  
netstat processes, and over time, they continue to build up. Right  
now, there are hundreds of zombied netstat processes forked from  
winbindd shown by ps afx. Any ideas of what could cause this?

Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
         workgroup = DOMAIN
         realm = DOMAIN.LOCAL
         server string = File Server
         interfaces = eth1, 127.0.0.1/8
         security = ADS
         password server = windows.domain.local
         username map = /etc/samba/smbusers
         log level = 5
         log file = /var/log/samba/%m_%U.log
         max log size = 2048
         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
         printcap name = /etc/printcap
         logon script = logon.bat
         logon path          logon drive = H:
         os level = 33
         preferred master = No
         local master = No
         domain master = No
         idmap uid = 10000-20000
         idmap gid = 10000-20000
         winbind separator = +
         winbind enum users = Yes
         winbind enum groups = Yes
         inherit permissions = Yes
         hosts allow = 127., 10.1.22., 10.1.49., 10.1.55.
         print command = lpr -P %p -o raw %s -r
         lpq command = lpq -P%p
         lprm command = lprm -P%p %j
         lppause command = lpc hold %p %j
         lpresume command = lpc release %p %j
         queuepause command = lpc -P%p stop
         queueresume command = lpc -P%p start
         include = /etc/samba/smb-shares.conf

$ cat /etc/krb5.conf
[logging]
  default = FILE:/var/log/krb5libs.log
  kdc = FILE:/var/log/krb5kdc.log
  admin_server = FILE:/var/log/kadmind.log

[libdefaults]
  default_realm = DOMAIN.LOCAL
  dns_lookup_realm = false
  dns_lookup_kdc = false
  ticket_lifetime = 24h
  forwardable = yes

[realms]
  DOMAIN.LOCAL = {
   kdc = windows.domain.local:88
   admin_server = windows.domain.local:749
   default_domain = domain.local
  }

[domain_realm]
  .domain.local = DOMAIN.LOCAL
  domain.local = DOMAIN.LOCAL

[kdc]
  profile = /var/domain/krb5kdc/kdc.conf

[appdefaults]
  pam = {
    debug = false
    ticket_lifetime = 36000
    renew_lifetime = 36000
    forwardable = true
    krb4_convert = false

ps afx snippet:
21915 ?        Ss     0:16 winbindd
21916 ?        S      4:06  \_ winbindd
22824 ?        Z      0:00  |   \_ [netstat] <defunct>
24255 ?        Z      0:00  |   \_ [netstat] <defunct>
28088 ?        Z      0:00  |   \_ [netstat] <defunct>
29952 ?        Z      0:00  |   \_ [netstat] <defunct>