RPM Package from RH Enterprise 3. Samba 3.0.0.

Samba + OpenLdap 2.0 + Posix ACL on Red Hat Filesystem.

When I add users to a file in the GUI on W2K half of them work.
They try (from syslog):
First:
 smbd[12101]:   ldapsam_search_one_group: searching for:[(&
(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-2025429265-1202660629-
1957994488-1122))]   =INCORRECT=
slapd[12028]: conn=3 op=59 SRCH base="ou=groups,ou=lx,dc=isla,dc=pt" scope=2 
filter="(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-2025429265-
1202660629-1957994488-1122))"   =INCORRECT=

Then they try:
smbd[12101]:   smbldap_search_suffix: searching for:[(&(sambaSID=S-1-5-21-
2025429265-1202660629-1957994488-1122)(objectclass=sambaSamAccount))]  
==CORRECT=
slapd[12028]: conn=3 op=60 SRCH base="dc=isla,dc=pt" scope=2 filter="(&
(sambaSID=S-1-5-21-2025429265-1202660629-1957994488-1122)
(objectClass=sambaSamAccount))" ==CORRECT==

So they work (getfacl * reveals OK)

The other half of the users just try the first (the incorrect one) and do not 
work