[Samba] Join domain as BDC: could not get CRED

[ksun at ABINITIO.COM]

Greetings,
        I am following Tournier's Howto to configure Samb 3.x as domain 
controller. I use
        "net rpc getsid -S <pdc-name> -W <domain name>"
        to obtain the domain SID and configure smbldap-tools and created 
the backend database. (The SID is also saved on secrets.db on local 
machine)
        I joint this server to the domain successfully using,
        "net rpc join -Uadministrator%password"
        The srvmgr.exe can see it joined the domain as a BDC.
        But when I try to synchronize the domain controllers using
        "net rpc vampire -Uadministrator&password"
        It faied with "Can not get CRED" or something like it.
        Waht did I do wrong?
        Please reply to my E-mail account at ksun at abinitio.com
-- Kang