[Samba] Samba, ADS and "Failed to verify incoming ticket!"

[Buozis, Martynas]

Hello

I have Samba that joined Windows 2003 based ADS. At least "net ads
testjoin" and "net rpc testjoin" gives that "Join is OK". Alas clients
can't connect to Samba server. In a log I see following messages :

[2005/04/08 14:51:41, 0] tdb/tdbutil.c:(725)
  tdb(/web/opt/etc/smbprivate//secrets.tdb): tdb_lock failed on list 2
ltype=2 (Resource temporarily unavailable)
[2005/04/08 14:51:41, 1] libads/kerberos_verify.c:(312)
  ads_verify_ticket: unable to protect replay cache with mutex.
[2005/04/08 14:51:41, 1] smbd/sesssetup.c:(173)
  Failed to verify incoming ticket!
[2005/04/08 14:51:41, 3] smbd/error.c:(105)
  error string = Resource temporarily unavailable
[2005/04/08 14:51:41, 3] smbd/error.c:(129)
  error packet at smbd/sesssetup.c(174) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2005/04/08 14:51:41, 3] smbd/process.c:(1334)
  timeout_processing: End of file from client (client has disconnected).

Other "net ads" based commands are working fine. I can get "ads status"
displayed without any suspicious entries, I can get users/groups lists.
But client (that is member of same domain) connections always end with
above shown entries in log file.

Any ideas what can be wrong ?

With best regards
Martynas