Проблема авторизации Samba + LDAP

[global]
        server string = FileServer
        local master = no
        security = domain
        workgroup = NAME_DOMAIN
        netbios name = ET-SMB3
        passdb backend = ldapsam:ldap://127.0.0.1
        wins server = ip_pdc
        remote browse sync = ip_mask
        wins support = No
        smb ports = 139
        nt acl support = yes
        deadtime = 15
        strict sync = no
        sync always = no
        ldap admin dn = cn=Administrator,dc=energotrade,dc=sar
        ldap group suffix = ou=group
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Machines
        ldap passwd sync = Yes
        ldap suffix = dc=energotrade,dc=sar
        ldap user suffix = ou=people
        ldap ssl = off
        ldapsam:trusted = yes
        idmap uid = 10000-15000
        idmap gid = 10000-15000
        log level = 0 vfs:2
        syslog = 0
        max log size = 0
        encrypt passwords = yes
        create mask = 0660
        directory mask = 0770
        client lanman auth = no
        follow symlinks = yes
        unix extensions = no
        wide Links = Yes
        read raw = yes
        write raw = yes
        unix charset = UTF-8
        dos charset = cp866
        store dos attributes = yes
        time server = no
        posix locking = no
        case sensitive = no
        domain logons = No
        domain master = No
        password server = *
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536 SO_SNDBUF=65536
        kernel oplocks = no
        usershare allow guests = No
        hide unreadable = yes

# net getdomainsid 
SID for local machine ET-SMB3 is: S-1-5-21-256026485-1243830727-2206694319
SID for domain ET-SAR is: S-1-5-21-2290867074-1763928443-2586709889

 # net getlocalsid 
SID for domain ET-SMB3 is: S-1-5-21-256026485-1243830727-2206694319

# id authldap
uid=11989(authldap) gid=100(users) groups=100(users)

#net groupmap list
Domain Admins (S-1-5-21-2290867074-1763928443-2586709889-512) -> DomainAdmins
Domain Users (S-1-5-21-2290867074-1763928443-2586709889-513) -> DomainUsers
....
...
..

[2015/08/17 11:26:21.492192,  0] auth/auth_domain.c:331(domain_client_validate)
  domain_client_validate: unable to validate password for user NAME_COMPUTER$ in domain ET-SAR to Domain controller ET-LDAP1. Error was NT_STATUS_NO_SUCH_USER.
[2015/08/17 11:26:34.647452,  0] passdb/passdb.c:632(lookup_global_sam_name)
  User LDAP_USER with invalid SID S-1-5-21-2290867074-1763928443-2586709889-25252 in passdb