Windows clients don't authenticate against AD on SLES 10 server
 

I have set up an SLES 10 box to be a fileserver on our Windows 2003 domain. Kinit responds with a valid ticket, and net ads join responds with domain joined. The server appears in Active Directory as a Domain Controller, and is accessible from there. Am using YAST to do all this, and all seems to be as it should. However, the startup logon screen returns "incorrect user name/password" when I try a domain user, and trying to access the user directory from a remote windows client also gets the same thing. What the heck am I doing wrong?