samba - Jan 2004 - computer name instead of username?

Hi,

Since the "Failed to verify incoming ticket" problem on Samba3.0.1, I
rolled
back to 3.0.  All the authentication and connection jobs are done successfully
for 3.0, and this time clients able to browse to the Samba.  However, I keep ask
for the username, password when I access to any of the shared folder.  The log
of client shows:

[2004/01/06 17:44:50, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
  Username CLIENT$ is invalid on this system

where CLIENT$ is the computer name of client computer.  I wonder why it
authenticate with computer name rather than user name.

smb.conf
=======[global]
        workgroup = CHAETO
        realm = CHAETO.COM
        server string = Test Linux File Server
        security = ADS
        auth methods = winbind
        password server = pdc
        client lanman auth = No
        client plaintext auth = No
        log file = /var/log/samba/log.%m
        min protocol = LANMAN1
        local master = No
        wins server = 192.168.0.248
        ldap ssl = no
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        template homedir = /home/winnt/%D/%U
        template shell = /bin/bash
        winbind separator = +

[public]
        comment = Public Stuff
        path = /public/shared
        valid users = '@CHAETO+Domain Users'
        write list = '@CHAETO+Domain Users'
        force group = ntgroup
        create mask = 0666
        directory mask = 0777

Please help, thankyou

Best Rgds.,
Steven

On Wed, Jan 07, 2004 at 11:15:22AM +0800, steven.tse@possehlelectronics.com.hk
wrote:
> 
> Hi,
> 
> Since the "Failed to verify incoming ticket" problem on
Samba3.0.1, I rolled
> back to 3.0.  All the authentication and connection jobs are done
successfully
> for 3.0, and this time clients able to browse to the Samba.  However, I
keep ask
> for the username, password when I access to any of the shared folder.  The
log
> of client shows:
> 
> [2004/01/06 17:44:50, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
>   Username CLIENT$ is invalid on this system
> 
> where CLIENT$ is the computer name of client computer.  I wonder why it
> authenticate with computer name rather than user name.
Known issue that is still on my 'pet hate' list.  Basicly, machines
are people too, and can login, wiht kerberos.  We need to allow them
to log in.  There bug #722 in bugzilla.samba.org.

Andrew Bartlett

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet@samba.org]
Sent: Wednesday, January 07, 2004 12:52 PM
To: steven.TSE
Cc: samba@lists.samba.org
Subject: Re: [Samba] computer name instead of username?


On Wed, Jan 07, 2004 at 11:15:22AM +0800,
steven.tse@possehlelectronics.com.hk wrote:
> 
> Hi,
> 
> Since the "Failed to verify incoming ticket" problem on
Samba3.0.1, I
rolled
> back to 3.0.  All the authentication and connection jobs are done
successfully
> for 3.0, and this time clients able to browse to the Samba.  However, I
keep ask
> for the username, password when I access to any of the shared folder.  The
log
> of client shows:
> 
> [2004/01/06 17:44:50, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
>   Username CLIENT$ is invalid on this system
> 
> where CLIENT$ is the computer name of client computer.  I wonder why it
> authenticate with computer name rather than user name.
Known issue that is still on my 'pet hate' list.  Basicly, machines
are people too, and can login, wiht kerberos.  We need to allow them
to log in.  There bug #722 in bugzilla.samba.org.

Andrew Bartlett


Thanks Andrew, is that mean I have to wait until next bug fixed version?
Samba3.0.2?