samba 3 as an ADS domain member

Following instructions at samba by example and
this
still give me unsuccessful results with the following errors:

-----------------------------------------------------------------
rick-dev:/# kinit rick@DOMAIN.LOCAL
Password for rick@DOMAIN.LOCAL:
rick-dev:/# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: rick@DOMAIN.LOCAL

Valid starting Expires Service principal
03/16/06 16:50:07 03/17/06 02:50:13 krbtgt/DOMAIN.LOCAL@DOMAIN.LOCAL
renew until 03/17/06 16:50:07


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
rick-dev:/# kinit rick@DOMAIN.LOCAL
Password for rick@DOMAIN.LOCAL:
rick-dev:/# net ads join -Urick%password
[2006/03/16 16:53:18, 0] libads/ldap.c:ads_add_machine_acct(1414)
ads_add_machine_acct: Host account for rick-dev already exists - modifying old account
[2006/03/16 16:53:18, 0] libads/ldap.c:ads_join_realm(1772)
ads_join_realm: ads_add_machine_acct failed (rick-dev): Insufficient access
ads_join_realm: Insufficient access
rick-dev:/#
------------------------------------------------------------------------------------