Winbind dont return users/groups

Hi,
I heve samba 3.0.23b + openldap. It work ok, but now I want to make
squid auth for members of domain.
Problem is following:

#cat smb.conf
....
password server = MyPDC
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = yes
client signing = yes
....

# wbinfo -t
checking the trust secret via RPC calls succeeded

# wbinfo -a user%pass
plaintext password authentication succeeded
challenge/response password authentication succeeded

# wbinfo -u
Error looking up domain users

# wbinfo -g
Error looking up domain users

log:
....
winbindd version 3.0.23b-SerNet-RedHat started.
Copyright The Samba Team 2000-2004

[] lib/smbldap.c:smbldap_open_connection(788)
smbldap_open_connection: connection opened

[] nsswitch/winbindd_group.c:get_sam_group_entries(584)
get_sam_group_entries: Failed to enumerate domain local groups!
....

Probably sequence of this "usrmgr" dont see groups but see users.
I find som post with some problem but people use old V od samba and
update solv it, I heve 23b.

Thx for any suggestion.