Кереберос выдаёт тикет

wbinfo -p
Ping to winbindd succeeded on fd 4

net ads join -U user
user's password:
Using short domain name -- DOM
DNS update failed!
Joined 'COMPNAME' to realm 'MYDOMAIN.RU' (хотя к слову он не появляется в АД)

Проблема в следующем
wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
Could not check secret

wbinfo -u
Error looking up domain users

smb.conf
[global]
        dos charset = cp866
        unix charset = koi8-r
        display charset = koi8-r
        workgroup = DOM
        realm = MYDOMAIN.RU
        server string = File server
        interfaces = 172.22.1.3/24
        security = ADS
        auth methods = winbind
        password server = 192.168.0.1 172.22.0.2
        log level = 0 vfs:1
        log file = /var/log/samba/samba.log
        max log size = 0
        deadtime = 360
        paranoid server security = No
        max open files = 100000
        load printers = No
        show add printer wizard = No
        os level = 8
        dns proxy = No
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind nested groups = No
        winbind refresh tickets = Yes
        hosts allow = 192.168., 172.22., 127.
        case sensitive = No
        hide unreadable = Yes

Помогите плз