Environment:
- Samba 3.0.25b
- Windows Server 2003 R2 AD forest
- winbind authentication, ads security (see config below)
- openldap idmap store

When attempting to 'sudo -s' from the command line when logged in via winbind, I get the following log messages:

Nov  6 15:45:59 <host> winbindd[11514]:   ERROR: string overflow by 1 (256 - 255) in safe_strcpy [[11450]: lookupname ���o�~��^D�ۈ�0��d:�^W^K9tP�p��}^O�^^�7\"���N���
�^Fњ+4�^XT��^M�j^P�J^E�Q^V�<^Y�q�3B^]^N�]}�^S�MB��l"� 
Nov  6 15:45:59 <host> winbindd[11514]:   �^Y^R=Bʻ#�q^G��n��K_��X^D��k��^Ti^N>�@};N 
Nov  6 15:45:59 <host> winbindd[11514]:   !Y��6�^N��h���F^S7ڎ^W��lhUV��i>���^]�8Io!�/�?@�^G�xMJTU�hO^D1�^Y�I22���U �YD�^_���{KH�R.��l]��6:� %��`�a(���^\s|̋s&�0^Tτ�H8� 
Nov  6 15:46:06 <host> winbindd[11450]:   ERROR: string overflow by 1 (256 - 255) in safe_strcpy [[11512]: endpwent 

I apologize for the unrecognizable characters, but that is what I get in the logs.  This is at a loglevel of 3.

I'm using the SerNet RPMs:

samba3-utils-3.0.25b-33
samba3-client-3.0.25b-33
samba3-cifsmount-3.0.25b-33
samba3-winbind-3.0.25b-33
system-config-samba-1.2.21-1.el4.1
samba3-3.0.25b-33

My config is:

#/etc/samba/smb.conf
[global]
   workgroup = <domain>
   security = ads
   server string = Samba Server
   log file = /var/log/samba/%m.log
   max log size = 50   log level = 1

   password server = *  
   realm = <realm>

   os level = 10  
   local master = no
   domain master = no
   preferred master = no
   wins support = no
   wins server = <ip address>
   wins proxy = no

   dns proxy = no
   ldap admin dn = "<dn>"
   ldap suffix = <dn>

   idmap backend = ldap://<ldap server>
   idmap gid = 150000 - 200000
   idmap uid = 150000 - 200000

   # winbind configuration
   winbind use default domain = yes
   winbind nested groups = yes

   winbind enum users = no
   winbind enum groups = no

   template homedir = /users/home/%u
   template shell = /bin/bash

   # local share declarations only
   include = /etc/samba/local.conf

More information available upon request.