[Samba] How do you get samba to use AD groups?

[Greg]

I'm having trouble using an AD group as a 'valid users = @DOMAIN+group' in
my samba share definition.

I have a Windows SBS 2003 w/SP1 ADS/PDC and a Fedora Core 4 system running a
3.0.14a-2 samba.  All updates applied.

When I do DOMAIN+user it works fine.  When I do as above, It fails (I get
the pw box).  I have verified that I am a member of the group I am testing
with.

I see some messages in the logs (below).  What do they mean and what should
I do to get access to shares by an AD group?

IP.log:
[2005/08/27 17:18:11, 1] smbd/ipc.c:api_fd_reply(290)
  api_fd_reply: INVALID PIPE HANDLE: 711b
[2005/08/27 17:18:11, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.

name.log:
[2005/08/27 17:25:16, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.

-g