Join Windows 2003 Domain

I am trying to get my SUSE 10.1 machine to join my Windows 2003 domain. I have followed the info from http://www.suseforums.net/index.php?showtopic=18932 and keep running into a problem. When trying to join the domain with net ads join -U user I get the following error:

[2008/06/05 13:46:57, 0] libads/kerberos.c:ads_kinit_password(206)
keerberos_kinit_password machine@domain.com failed: Preauthentication failed

and

[2008/06/05 13:46:57, 0] utils/net_ads.c:ads_startup(193)
ads_connect: Preauthentication failed.

Here is the contents of my krb5.conf, smb.conf, nsswitch.conf, and pam.d folder:

krb5.conf

[logging]
default = FILE10000:/var/log/krb5lib.log

[libdefaults]
ticket_lifetime = 24000
default_realm = DOMAIN.COM
default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5
default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5 aes256-cts arcfour-hmac-md5
clockskew = 300

[realms]
DOMAIN.COM = {
kdc = machine.domain.com
admin_server = machine.domain.com
default_domain = DOMAIN.COM
}
[domain_realm]
.DOMAIN.COM = DOMAIN.COM
[appdefaults]
pam = {
ticket_lifetime = 1d
renew_lifetime = 1d
forwardable = true
proxiable = false
retain_after_close = false
minimum_uid = 0
try_first_pass = true
}

nsswitch.conf

passwd: files winbind
group: files winbind
shadow: files
hosts: files dns wins
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis


smb

security = domain
netbios name = machine
realm = DOMAIN.COM
workgroup = DOMAIN
idmap uid = 1000-29999
idmap gid = 1000-29999
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind refresh tickets = yes
template homedir = /home/%D/%U
template shell = /bin/bash
client use spnego = yes
domain master = No
usershare allow guests = Yes
usershare max shares = 100
idmap backend = ldap://machine.domain.com
ldap admin dn = cn=administrator, dc=domain, dc=com
ldap delete dn = No
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Machines
ldap passwd sync = Yes
ldap replication sleep = 1000
ldap ssl = No
ldap suffix = dc=sfsfnet,dc=net
ldap timeout = 5
ldap user suffix = ou=Users
passdb backend = ldapsam:ldap://machine.domain.com smbpasswd
wins support = No
add machine script = /sbin/yast /usr/share/YaST2/data/add_machine.ycp %m$
domain logons = no


pam.d

common-account
account sufficient pam_winbind.so
account required pam_unix2.so

common-auth
auth required pam_env.so
auth sufficient pam_winbind.so
auth required pam_unix2.so

common-pass
password required pam_pwcheck.so nullok
password required pam_unix2.so nullok use_first_pass use_authtok

common-sess
session required pam_limits.so
session required pam_unix2.so

I appreciate any help\advice I can get on this. I am a newbie.