[Samba] winbind failing

[mike]

i have a samba 2.2.7 pdc and a samba 3.0.14 domain member server (dms). 
  after setting winbind up (including adding to the domain), i attempt 
to access the domain member server from a win2k client, which fails with 
the network request is not supported".


this is in samba client log:

[2005/05/03 01:44:23, 2] auth/auth.c:check_ntlm_password(312)
   check_ntlm_password:  Authentication for user [mike] -> [mike] FAILED 
with error NT_STATUS_NOT_SUPPORTED


this in winbind log:

[2005/05/03 01:44:23, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45)
   cli_net_req_chal: LSA Request Challenge from DDSSRV10 to 10.4.40.135: 
D49E35CF83280EEC
[2005/05/03 01:44:23, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
   cli_nt_setup_creds: request challenge failed
[2005/05/03 01:44:23, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(538)
   could not open handle to NETLOGON pipe (error: NT_STATUS_NOT_SUPPORTED)
[2005/05/03 01:44:23, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(654)
   NTLM CRAP authentication for user [DDS]\[mike] returned 
NT_STATUS_NOT_SUPPORTED (PAM: 4)
[2005/05/03 01:46:39, 3] nsswitch/winbindd_rpc.c:trusted_domains(970)
   rpc: trusted_domains

here is a section of smb.conf:

         security = domain
         idmap uid = 10000-20000
         idmap gid = 10000-20000
         template primary group = "Domain Users"
         template shell = /bin/bash
         # username map = /etc/samba/smbusers
         # winbind enable local accounts = Yes

         add user script = /usr/sbin/useradd -m '%u'
         add machine script = /usr/sbin/useradd -M '%u'
         add group script = /usr/sbin/groupadd '%g'

    encrypt passwords = true


    obey pam restrictions = yes

    guest account = nobody
    invalid users = root


any help?