ejabberd 1.1.2 + AD = authentication problem

ejabberd 1.1.2 installed.
ejabberd.cfg contains following lines:
----
{auth_method, internal}.

{auth_method, ldap}.
{ldap_servers, ["oberon"]}. % List of LDAP servers
{ldap_uidattr, "sAMAccountName"}. % LDAP attribute that holds user ID
{ldap_base, "ou=Jabber,dc=sh,dc=local"}. % Search base of LDAP directory
{ldap_rootdn, "cn=Administrator,cn=Users,dc=sh,dc=local"}. % LDAP manager
{ldap_password, "xxxx"}. % Password to LDAP manager
{ldap_filter, "(memberOf=*)"}.

{mod_vcard_ldap,
[{ldap_vcard_map,
[{"NICKNAME", "%u", []},
{"GIVEN", "%s", ["givenName"]},
{"MIDDLE", "%s", ["initials"]},
{"FAMILY", "%s", ["sn"]},
{"FN", "%s", ["displayName"]},
{"EMAIL", "%s", ["mail"]},
{"ORGNAME", "%s", ["company"]},
{"ORGUNIT", "%s", ["department"]},
{"CTRY", "%s", ["c"]},
{"LOCALITY", "%s", ["l"]},
{"STREET", "%s", ["streetAddress"]},
{"REGION", "%s", ["st"]},
{"PCODE", "%s", ["postalCode"]},
{"TITLE", "%s", ["title"]},
{"URL", "%s", ["wWWHomePage"]},
{"DESC", "%s", ["description"]},
{"TEL", "%s", ["telephoneNumber"]}]},
{ldap_search_fields,
[{"User", "%u"},
{"Name", "givenName"},
{"Family Name", "sn"},
{"Email", "mail"},
{"Company", "company"},
{"Department", "department"},
{"Role", "title"},
{"Description", "description"},
{"Phone", "telephoneNumber"}]},
{ldap_search_reported,
[{"Full Name", "FN"},
{"Nickname", "NICKNAME"},
{"Email", "EMAIL"}]}
]
}.
------
Connect by Psi return error "There was error communication whith Jabber server. Details: Athentication erorr: No apropriate mechanism available for given security settings"
Record in log file is "=INFO REPORT==== 2007-01-10 13:08:50 ===
I(<0.1164.0>:ejabberd_listener:90): (#Port<0.1205>) Accepted connection {{192,168,11,48},1588} -> {{192,168,11,99},5222}"

Connect by Miranda (whth same settings) return error "Athentication filed for jab@oberon"
Record in log file is "=INFO REPORT==== 2007-01-11 12:03:10 ===
I(<0.2989.0>:ejabberd_listener:90): (#Port<0.2939>) Accepted connection {{192,168,11,20},3218} -> {{192,168,11,99},5222}

=INFO REPORT==== 2007-01-11 12:03:10 ===
I(<0.3077.0>:ejabberd_c2s:417): (#Port<0.2939>) Failed legacy authentication for jab@oberon/Miranda"

What's wrong ?