[Samba] samba-tool join domain fails

[Axel]

Hi folks,

big problem with my testint environment... my windows 2003-domain exists 
since 2004 and the credentials are correct, guaranteed.
This problem is actually same on Ubuntu 12.04.3 and Debian 7...

<code>
root at pa-lnxd-04:~# /usr/local/samba/bin/samba-tool domain join 
INTRANET.DOMAIN.DE DC -Uintranet/admin --realm=intranet.DOMAIN.de

Finding a writeable DC for domain 'INTRANET.DOMAIN.DE'
Found DC wi-pas01.intranet.DOMAIN.de
Password for [INTRANET\admin]:
workgroup is INTRANET
realm is intranet.DOMAIN.de
checking sAMAccountName
Adding CN=PA-LNXD-04,OU=Domain Controllers,DC=intranet,DC=DOMAIN,DC=de
Join failed - cleaning up
checking sAMAccountName
ERROR(ldb): uncaught exception - LDAP error 50 
LDAP_INSUFFICIENT_ACCESS_RIGHTS - <00000522: SecErr: DSID-031A0F44, 
problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
>  <>
   File 
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", 
line 175, in _run
     return self.run(*args, **kwargs)
   File 
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", 
line 552, in run
     machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
   File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", 
line 1104, in join_DC
     ctx.do_join()
   File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", 
line 1007, in do_join
     ctx.join_add_objects()
   File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", 
line 499, in join_add_objects
     ctx.samdb.add(rec)
</code>

It seems to be, that all prerequisites fine. DNS, ACL etc., ping works 
fine... also resolutions of fqdn's

Can someone help?

Thanks & Cheers
  axel