SAMBA PDC + LDAP + Kerberos

Делал по руководству http://ru.gentoo-wiki.com/Samba_PDC_LDAP

cat /etc/openldap/slapd.conf
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba.schema

pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args

access to dn.base=""
by self write
by * auth

access to attrs=userPassword
by self write
by * auth

access to attrs=shadowLastChange
by self write
by * read

access to *
by * read
by anonymous auth

# loglevel 256

database ldbm
suffix "dc=worknet,dc=intnl"
rootdn "cn=root,dc=worknet,dc=intnl"
rootpw {SSHA}EW3BApUqmtCqR5KuBhmFKx9nADRisUBZ
directory /var/lib/openldap-ldbm

index objectClass eq
# index cn eq,subinitial
# index sn eq,subinitial
# index uid eq,subinitial
# index displayName eq,subinitial
# index uidNumber eq
# index gidNumber eq
# index memberUID eq
# index sambaSID eq
# index sambaPrimaryGroupSID eq
# index sambaDomainName eq

cat /etc/openldap/ldap.conf
host 127.0.0.1
base dc=worknet, dc=intnl

при запуске smbldap-populate -a Administrator -k 0 -m 0
smbldap-populate -a root -k 0 -m 0
Populating LDAP directory for domain worknet (S-1-5-21-3666475296-2155694800-1910466944)
(using builtin directory structure)

adding new entry: dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 7.
adding new entry: ou=Users,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 12.
adding new entry: ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 17.
adding new entry: ou=Users,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 22.
adding new entry: ou=Idmap,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 27.
adding new entry: uid=root,ou=Users,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 58.
adding new entry: uid=nobody,ou=Users,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 89.
adding new entry: cn=Domain Admins,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 101.
adding new entry: cn=Domain Users,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 112.
adding new entry: cn=Domain Guests,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 123.
adding new entry: cn=Domain Computers,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 134.
adding new entry: cn=Administrators,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 179.
adding new entry: cn=Account Operators,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 201.
adding new entry: cn=Print Operators,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 212.
adding new entry: cn=Backup Operators,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 223.
adding new entry: cn=Replicators,ou=Groups,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 234.
adding new entry: sambaDomainName=worknet,dc=worknet,dc=intnl
failed to add entry: no global superior knowledge at /usr/sbin/smbldap-populate line 499, line 242.

Please provide a password for the domain root:
No such object at /usr/sbin//smbldap_tools.pm line 353.

где искать загвоздку?