samba - Jan 2008 - Failed to parse cldap reply

Dear List,

I seem to have a problem with winbind. 

Have successfully joined samba to a 2003 AD, but when I start winbind, the logs
are full of the following:

==> log.winbindd <=[2008/01/14 11:25:58, 1]
libads/cldap.c:recv_cldap_netlogon(247)
  Failed to parse cldap reply

Running wbinfo -t returns:
checking the trust secret via RPC calls failed
error code was  (0x0)
Could not check secret


Distribution is Centos EL4.
I am currently trying with samba-3.0.26, but have tried 3 older versions.
I have installed MITs Kerberos krb5-1.6.3.
My openldap is version openldap-2.2.13.

Here is my krb5.conf:
[libdefaults]
 default_realm = DOM.LOCAL
 dns_fallback = true

[realms]
 DOM.LOCAL = {
  kdc = 192.168.1.50
 }

[domain_realm]
 .dom.local = DOM.LOCAL
 dom.local = DOM.LOCAL

## eof


Here is my smb.conf:
[global]
  server string = Samba %v
  encrypt passwords = Yes
  workgroup = DOM.DOM
  password server = 192.168.1.50
  security = ADS
  realm = DOM.LOCAL
  interfaces = 192.168.1.192

  idmap uid = 30000-40000
  idmap gid = 30000-40000

  winbind use default domain = yes
  winbind separator = +
  winbind enum users = yes
  winbind enum groups = yes

  client use spnego = yes
  #server signing = auto

  preferred master = no
  domain master = no
  local master = no

An update on this problem:
 
> Have successfully joined samba to a 2003 AD, but when I start winbind,
the
> logs are full of the following:
> 
> ==> log.winbindd <=> [2008/01/14 11:25:58, 1]
libads/cldap.c:recv_cldap_netlogon(247)
>   Failed to parse cldap reply
>From source code, I installed the latest krb5, openldap and
samba-3.0.28, but I still had the same problem.

Ran up wireshark and noticed a CLDAP query (AD Ping), that was returning
zero results, hence libads/cldap.c was bailing out with the error above.

The CLDAP query was searching with the filter 
Filter: (&(&(DnsDomain=DOM.DOM)(Host=GW2))(NtVer=06:00:00:00))
...
Item: Netlogon

And the return packet contained:
LDAPMessage searchResDone(4) [0 results]
        messageID: 4
        protocolOp: searchResDone (5)
            searchResDone
                resultCode: success (0)
                matchedDN:
                errorMessage:


After much googling, I found a post, where some chap noticed CLDAP
problems after upgrading from samba-3.0.22.

I've just installed samba-3.0.22 and my problems have gone away. When I
run up wireshark, there doesn't appear to be any CLDAP queries running,
but all the usual commands (below) work OK:
wbinfo -t
wbinfo -u 
wbinfo -a user%pass


I'm not sure how to further debug this problem - I'd appreciate any
suggestions. Clearly I'd like to run the latest samba-3.0.28.

Thanks,
Chris