Господа - подскажите решение если кто сталкивался
Существует домен Active Directory под w2k server(возрастом в 4 года)
samba-3.0.21 и более ранние в него всегда вваливались без проблем в стиле ADS
с fedora-6 в стандартной поставке идёт samba-3.0.23c
вот она то и желает в наш домен вводиться ни при каких условиях
привожу вывод команды net ads join -d 3

[root@fc6 samba]# net ads join -U adminuser -d 3
[2007/05/08 14:11:43, 3] param/loadparm.c:lp_load(4954)
  lp_load: refreshing parameters
[2007/05/08 14:11:43, 3] param/loadparm.c:init_globals(1410)
  Initialising global parameters
[2007/05/08 14:11:43, 3] param/params.c:pm_process(572)
  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2007/05/08 14:11:43, 3] param/loadparm.c:do_section(3696)
  Processing section "[global]"
[2007/05/08 14:11:43, 2] lib/interface.c:add_interface(81)
  added interface ip=172.20.10.115 bcast=172.20.255.255 nmask=255.255.0.0
adminuser's password:
[2007/05/08 14:11:48, 3] libsmb/namequery.c:get_dc_list(1426)
  get_dc_list: preferred server list: ", kd"
[2007/05/08 14:11:48, 3] libads/ldap.c:ads_connect(287)
  Connected to LDAP server 172.20.0.29
[2007/05/08 14:11:48, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2007/05/08 14:11:48, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2
[2007/05/08 14:11:48, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3
[2007/05/08 14:11:48, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10
[2007/05/08 14:11:48, 3] libads/sasl.c:ads_sasl_spnego_bind(219)
  ads_sasl_spnego_bind: got server principal name =kd$@SEUS.RU
[2007/05/08 14:11:48, 3] libsmb/clikrb5.c:ads_krb5_mk_req(552)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2007/05/08 14:11:48, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(488)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration Wed, 09 May 2007 00:12:18 NOVST
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_start_connection(1426)
  Connecting to host=kd.mydomain.ru
[2007/05/08 14:11:48, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 172.20.0.29 at port 445
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_session_setup_spnego(721)
  Doing spnego session setup (blob length=99)
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_session_setup_spnego(746)
  got OID=1 2 840 48018 1 2 2
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_session_setup_spnego(746)
  got OID=1 2 840 113554 1 2 2
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_session_setup_spnego(746)
  got OID=1 2 840 113554 1 2 2 3
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_session_setup_spnego(746)
  got OID=1 3 6 1 4 1 311 2 2 10
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_session_setup_spnego(754)
  got principal=kd$@MYREALM.RU
[2007/05/08 14:11:48, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(546)
  Doing kerberos session setup
[2007/05/08 14:11:48, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(488)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect] expiration Wed, 09 May 2007 00:12:18 NOVST
[2007/05/08 14:11:48, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
  rpc_pipe_bind: Remote machine kd.seus.ru pipe \lsarpc fnum 0x4000 bind request returned ok.
[2007/05/08 14:11:48, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224)
  lsa_io_sec_qos: length c does not match size 8
[2007/05/08 14:11:48, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
  rpc_pipe_bind: Remote machine ds.seus.ru pipe \samr fnum 0x4001 bind request returned ok.
Using short domain name -- MYDOMAIN
[2007/05/08 14:11:48, 3] libsmb/cliconnect.c:cli_start_connection(1426)
  Connecting to host=kd.mydomain.ru
[2007/05/08 14:11:48, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 172.20.0.17 at port 445
[2007/05/08 14:11:48, 1] libsmb/cliconnect.c:cli_full_connection(1534)
  failed tcon_X with NT_STATUS_ACCESS_DENIED
[2007/05/08 14:11:48, 1] utils/net.c:connect_to_ipc_anonymous(232)
  Cannot connect to server (anonymously).  Error was NT_STATUS_ACCESS_DENIED
Connection failed: NT_STATUS_ACCESS_DENIED
Failed to verify membership in domain!
[2007/05/08 14:11:48, 2] utils/net.c:main(988)
  return code = -1

причём я отважился и поднял тестовый домен ad и в него эта самба ввалилась практически без проблем
я так предполагаю что в нашем существующем домене сидит какая то политика безопасности которая и не даёт мне провести ввод самбы в домен
подскажите пожалуйста если кто знает где грабли