I found out something unusual, first, here is the part of smb.conf:
ldap admin dn = cn=Directory Manager
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=zd-lj,dc=lan
ldap user suffix = ou=People

And here is the error:
[04/Jun/2008:08:38:56 +0200] conn=38162 fd=67 slot=67 connection from to
[04/Jun/2008:08:38:56 +0200] conn=38162 op=0 BIND dn="cn=Directory
manager" method=128 version=3
[04/Jun/2008:08:38:56 +0200] conn=38162 op=0 RESULT err=0 tag=97
nentries=0 etime=0 dn="cn=directory manager"
[04/Jun/2008:08:38:56 +0200] conn=38162 op=1 MOD
[04/Jun/2008:08:38:56 +0200] conn=38162 op=1 RESULT err=32 tag=103
nentries=0 etime=0
[04/Jun/2008:08:38:56 +0200] conn=38162 op=2 UNBIND
[04/Jun/2008:08:38:56 +0200] conn=38162 op=2 fd=67 closed - U1

If you noticed, in smb.conf I have ldap suffix = dc=zd-lj,dc=lan, error
is caused because in ldap modify comes only part of the suffix,
dc=zd-lj. I tried to put ldap suffix into quotas (double - "), but then
I got smbd error (doesn't start). Any ideas?

Bye, Alan