VAS / SAMBA how to

Hi,

If I am using a stock samba version (3.0.20b-3.21-1370-SUSE) and trying to get VAS working with it, do I have to join the system twice in the domain? One for VAS (vastool join...) and other for samba (net ads join...)?

I was trying to setup my samba server without joining the system for samba (net ads join...) and "vas-samba-config" failed on me with the following error:

Testing Samba is joined to Active Directory...
+ /usr/bin/net -s /etc/samba/smb.conf ads testjoin
[2009/03/26 18:43:58, 0] libads/kerberos.c:ads_kinit_password(147)
kerberos_kinit_password host1$@xx.xx.xx.COM failed: Preauthentication failed
[2009/03/26 18:43:59, 0] libads/kerberos.c:ads_kinit_password(147)
kerberos_kinit_password host1$@xx.xx.xx.COM failed: Preauthentication failed
[2009/03/26 18:43:59, 0] utils/net_ads.c:ads_startup(191)
ads_connect: Preauthentication failed
Join to domain is not valid
ERROR: Samba not joined: 'net ads testjoin' failed

this kind of indicates that VAS and samba both need to be joined separately. is that correct?

Thanks!