samba - Jun 2006 - spnego_kerberos(303) - Username Domain\Client$ is invalid

Can anybody tell me please, what isn't correct? What should I change in 
config?

/var/samba/log/log.XP-CLIENT-IP:

[2006/06/22 08:24:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(303)
 Username DOMAIN\XP-CLIENT-NAME$ is invalid on this system


all works in general, but the error above is listed in every 
/var/log/samba/log.CLIENT

Thanks
Steffen

---------------------------------------------

environment:
* Win2003R2 domain
  - ldap unix extensions used
* Samba 3.0.22 on Debian AMD64
  - ads member
  - MIT Kerberos 1.4.3-7
  - nss-ldap / pam-krb5
* XP SP2 clients

----------------------------------------------
/etc/samba/smb.conf
[global]
       workgroup = DOMAIN
       realm = FQDN
       netbios name = SMB
       server string = SMB - FILE SERVER
       interfaces = eth2:0
       bind interfaces only = Yes
       security = ADS
       log level = 1
       syslog = 0
       log file = /var/log/samba/log.%m
       max log size = 1000
       printcap name = cups
       preferred master = No
       local master = No
       ldap ssl = no
       admin users = Administrator, root
       hosts allow = XXXX
       printing = cups
       print command        lpq command = %p
       lprm command        hide files = /desktop.ini/
       csc policy = disable

[printers]
       comment = all printers
       path = /var/spool/samba
       printer admin = root, Administrator
       read only = No
       guest ok = Yes
       printable = Yes
       browseable = Yes
       public = Yes
       writeable = Yes

[print$]
       comment = printer drivers
       path = /etc/samba/drivers
       write list = root, Administrator
       writeable = Yes
       guest ok = Yes

[home]
       comment = home directories all users (700)
       path = /home
       read only = No
       create mask = 0700
       directory mask = 0711
       root preexec = /etc/samba/scripts/mk_samba_homedir -h "%u"
"%g"

------------------------------------------------------------------
etc/krb5.conf
[libdefaults]
       default_realm = FQDN
       clockskew = 300
       dns_lookup_kdc = true
       default_keytab_name = FILE:/etc/krb5.keytab
       default_tgs_enctypes = des-cbc-md5 des-cbc-crc arcfour-hmac-md5
       default_tkt_enctypes = des-cbc-md5 des-cbc-crc arcfour-hmac-md5
       permitted_enctypes = des-cbc-md5 des-cbc-crc arcfour-hmac-md5

       kdc_timeout = 1500
       max_retries = 2

[domain_realm]
       fqdn = FQDN
       .fqdn = FQDN

[logging]
       default = FILE:/var/log/krb5libs.log

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Steffen Kolbe wrote:
> Can anybody tell me please, what isn't correct? 
> What should I change in config?
> 
> /var/samba/log/log.XP-CLIENT-IP:
> 
> [2006/06/22 08:24:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(303)
> Username DOMAIN\XP-CLIENT-NAME$ is invalid on this system
You don't seen to be using winbindd so the machine accounts
are not seen via nss.





cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEmniVIR7qMdg1EfYRAgrXAJ9+kkizpBdGvOUJxpqFaIb3CmqBUACZAfjA
Xs4xGhgryFVNcfeChEH/oOc=1jCo
-----END PGP SIGNATURE-----