[Samba] winbind / samba 2.2.8a

[Lammersdorf, Lorenz]

hi all,

i fail to connect a sambashare on a suse8.0/samba 2.2.8a machine:

/var/log/samba/log.smbd says:
[2003/09/09 13:50:35, 0]
rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(406)
  cli_net_sam_logon_internal: NT_STATUS_NO_SUCH_USER
[2003/09/09 13:50:35, 0] smbd/password.c:domain_client_validate(1621)
  domain_client_validate: unable to validate password for user BACKUP in
domain WORKGROUP to Domain controller ffzx0sa0. Error was
NT_STATUS_NO_SUCH_USER.

smb.conf looks like that:
[global]
        load printers = Yes
        guest account = Nobody
        socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
        preserve case = yes
        wins server = 123.123.123.123
        map to guest = Bad User
        encrypt passwords = yes
        veto files = /*.eml/*.nws/riched20.dll/*.{*}/
        passwd program = /usr/bin/smbpasswd -U %u
        winbind uid = 10000-20000
        template shell = /bin/bash
        netbios name = ffzx0sa2
        winbind enum users = yes
        password server = ffzx0sa0
        path = /
        default = backup
        unix password sync = yes
        winbind gid = 10000-20000
        workgroup = FFZR1R
        winbind enum groups = yes
        os level = 2
        security = domain
        short preserve case = yes
        preferred master = no
        winbind separator = /
        interfaces = 123.456.789.0/255.255.0.0
         winbind use default domain = yes

#[homes]
#       comment = Home Directories
#       read only = No
#       create mask = 0640
#       directory mask = 0750
#       browseable = yes
#
# The following share gives all users access to the Server's CD drive,
# assuming it is mounted under /media/cdrom. To enable this share,
# please remove the semicolons before the lines
;[cdrom]
;       comment = Linux CD-ROM
;       path = /media/cdrom
;       locking = No

[printers]
        comment = All Printers
        path = /var/tmp
        create mask = 0600
        printable = Yes
        browseable = No


[backup]
        path = /home
        writeable = no
        force directory mode =444
        directory mode = 444
        force group = root
        valid users = FFZR1R/backup
        comment = Backup Freigabe
        delete readonly = no
        force user = root
        browseable = yes

as you see, winbind tries to find the user in a domain "WORKGROUP". in
smb.conf the domain is specified as FFZR1R., which is the right one (a
domain WORKGROUP" doesn't exist).
i'm able to join the domain ffzr1r with this machine and getent passwd
delivers all users of domain ffzr1r and some other that are trustet to
ffzr1r. 
any ideas?

thanks & regards
lorenz