samba domain authentication the Sequel

aueddonline

Ok so I originally posted a while back while I was testing my config on a fedora box http://www.techexams.net/forums/off-topic/40865-samba-domain-authentication.html , it's now the real deal on Redhat. I am hoping to connect a samba server to the domain that will act as a file server but that will also have the ability to have local groups and authenticate users connecting to the domain controller.

getting this error when connecting to the domain

[root@RED_HAT@DOMAIN ~]# net ads join -w DOMAIN -U Myusername
Myusername's password:
Using short domain name -- DOMAIN
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Failed to disable machine account for 'RED_HAT' in realm 'DOMAIN.UK'
Failed to disable machine account in AD. Please do so manually.
Failed to join domain: Type or value exists
[root@RED_HAT@DOMAIN ~]#

here's my smb.conf, my system is also able to resolve name lookups with the nslookup command. Any ideas, I have used the credentials i'm using with the fedora box to sucessfully connect to the domain.

[global]

# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
workgroup = DOMAIN

# server string is the equivalent of the NT Description field

# Security mode. Defines in which mode Samba will operate. Possible
# values are share, user, server, domain and ads. Most people will want
# user level security. See the Samba-HOWTO-Collection for details.
security = ADS
realm = DOMAIN.UK
password server = domaincontroller
encrypt passwords = yes
netbios name = RED_HAT
idmap uid = 10000-50000000
idmap gid = 1000-10000
winbind use default domain = yes
winbind offline logon = yes
winbind enum users = yes
winbind enum groups = yes
client use spnego = yes
domain master = no