Ghys,

Have you tried this setup in your /etc/samba/smb.conf file:

Instead of:
idmap backend = ad

Try:
#Where ldapserver would be the hostname for your Windows 2003 DC with SFU
idmap backend = ldap:ldap://ldapserver.domain.com

Are there any new/different messages in /var/log/messages?

Shannon