samba - Nov 2021 - sAMAccountName is Computer name

I direct connect to Samba AD DC server and run smbstatus :

Samba version 4.13.13-Debian
PID     Username     Group        Machine                                
    Protocol Version  Encryption           Signing
----------------------------------------------------------------------------------------------------------------------------------------
297104  EXAMPLE\pc-ijurisic$ EXAMPLE\domain computers 192.168.22.188 
(ipv4:192.168.22.188:57676) SMB3_11           -                    
AES-128-CMAC

I think output smstatus need to be:
Username: EXAMPLE\ijurisic
Group: EXAMPLE\domain users
Machine: EXAMPLE\pc-ijurisic

But I have:

Username: EXAMPLE\pc-ijurisic$
Group: EXAMPLE\domain
Machine: computers

If I run smbstatus -u EXAMPLE\ijurisic or smbstatus -u ijurisic got 
blank list on my server.

Very strange.

Dana 17.11.2021 14:20, Rowland Penny via samba je napisao(la):
> On Wed, 2021-11-17 at 14:07 +0100, Ivan Juri?i? wrote:
> 
>> Please see my output for sAMAccountName:
>> sAMAccountName: PC-IJURISIC$
>> That is wrong.
> 
> No, it isn't.
> You said that you ran 'net ads status' on a client and the above
was in
> the output, this is correct because that command displays the details
> for the machines account.
> 
> All computers are just users with an extra objectclass, so they also
> have a sAMAccountName, but to differentiate from an actual user, a
> computer sAMAccountName has a '$' on the end.
> 
> Rowland

On Wed, 2021-11-17 at 15:34 +0100, Ivan Juri?i? via samba
wrote:
> 
>   I direct connect to Samba AD DC server and run smbstatus :
> 
> Samba version 4.13.13-Debian
> PID     Username     Group        Machine                            
>     
>     Protocol Version  Encryption           Signing
> -------------------------------------------------------------------
> ---------------------------------------------------------------------
> 297104  EXAMPLE\pc-ijurisic$ EXAMPLE\domain computers 192.168.22.188 
> (ipv4:192.168.22.188:57676) SMB3_11           -                    
> AES-128-CMAC
> 
> I think output smstatus need to be:
> Username: EXAMPLE\ijurisic
NO
> Group: EXAMPLE\domain users
NO
> Machine: EXAMPLE\pc-ijurisic
Possibly, but I bet 192.168.22.188 is the ipaddress for pc-ijurisic
> 
> But I have:
> 
> Username: EXAMPLE\pc-ijurisic$
> Group: EXAMPLE\domain
No, that is EXAMPLE\domain computers
> Machine: computers
and that is 192.168.22.188 (ipv4:192.168.22.188:57676)

Remember what I said about a computer being a user ?
The output shows that the 'user' EXAMPLE\pc-ijurisic$ (aka A COMPUTER)
is connected.
> 
> If I run smbstatus -u EXAMPLE\ijurisic or smbstatus -u ijurisic got 
> blank list on my server.
Is EXAMPLE\ijurisic actually connected to a share ?
> 
> Very strange.
Not really, everything seems to be working as it should.

Rowland